Well, there was. But inputting or editing a url is akin to submitting a form or a get request, if somebody doesn't know how to not get breached by such events, they have no business running a website with delicate data

Yeah. If I remember correctly it was 'weev' and something to do with AT&T.

He seems a hard person to have sympathy for, which didn't help that much at all.