can i be arsed to turn this into a more serious security problem?

this probably wouldn't take long, but the obligatory snappy name and website obviously takes longer.