Citigroup hacked by trivial URL text substitution | Hacker News Reader