Capita launched civil service pension scheme site without 'basic' web security | Hacker News Reader