RT @igalko: Every time you write a web app that trusts a hidden "user_id" field, Bruce Schneier one-time hashes a kitten.