How I hacked Facebook
blog.dewhurstsecurity.com
blog.dewhurstsecurity.com
Maybe it would be a good idea to set up automated periodic external scans of your network to check for any unexpected accessible services. Don't know if anybody's doing that already, though.
Seriously?!