The more i think about it the more i feel that this has to be expected. Malicious intentions, lazy/cheap engineering ("agile" :-D) and security by obscurity resonate and leverage exponentially in this domain. slap in some rubbish proprietary code. "deactivate" the "show_equity()" clientside and comment out some javascript debug statements and whatnot. :-D Note that im only halfway serious! If the failure i can imagine is only 10% real its still a nightmare. im missing transparency in a lot of spots here. some more insights in the licencing process, requirements, security audit procedures and results would be "appreciated". proof>trust.
