"md_5, andrewkm and dinnerbone have managed to find and track down a user authentication exploit" LINK to the web page