labanskoller.se
Brute-Forcing Borrowers' PINs at the Swedish Board of Student Finance (CSN)
This is the story of when I found two security vulnerabilities in their login functionality and reported it to them.
The online whiteboard of Kristofer Palmvik