Hacker News Reader

Even though his site's security was not completely up to snuff, he did have a pretty good password.

Unfortunately, the chain is only as strong as the weakest link.

FWIW, the vulnerability is listed in the OWASP 2007 Top 10 as Malicious File Execution http://www.owasp.org/index.php/Top_10_2007-A3