Yesterday we tweeted about the URL manipulation bug that Citi failed to spot.  Quite shocking that they could miss something so obvious.  The response to the tweet and the story in general on the web one of shock and laughter.  How could an organisation like Citi allow such a high severity bug be leashed into [...]