Hacker News
GWT: Unpatched, Unauthenticated Java Deserialization | Hacker News Reader