It occurs to me that all of this hacking seems incredible because people who don't make software don't know how poorly it is made. People don't validate user input, or know the least of efficiency of data structures and how a "massive" request of 50 concurrent users can bring down their application.