Passport Canada pwned by stupid Web app bug

[iago]

http://www.theglobeandmail.com/servlet/story/RTGAM.20071204.wpassport1204/BNStory/National/home

Basically, you go to displayApplication.php?user_id=xxx and change it to =yyy to see others' applications for new passports. Wtf!

They fixed the problem on Friday, and I submitted my application for a Canadian passport on Monday. That's starting to sound a little suspicious!