Real life case illustrating the risks associated with improper access control
A short example of why security-sensitive software should default to protection, not exposure.