can i be arsed to turn this into a more serious security problem?
this probably wouldn't take long, but the obligatory snappy name and website obviously takes longer.