Wow, this sucks!

What a major mistake to check for hardcoded strings?

I am glad they're looking into it. This is just embarrassing.