http://www.johnjasonfallows.com/2017/09/05/slashdot-a-critical-apache-struts-security-flaw-makes-it-easy-to-hack-fortune-100-firms-2/