Super Secure Notes

An example of what not to do when designing a secure authentication system.

Something's not right about those password requirements for the signup page... And what happens if you change your username in the JavaScript console once you're signed in?

Enjoy exploiting the gaping security holes and leaving notes in other users' inboxes!