RFC security woes! -> A happy ":)" could be replaced with a frown by a malicious attacker, by using a winking eye ";(" http://is.gd/bet0i