http://www.veracode.com/blog/2008/10/credit-cards-failing-open/