Congrats Piru, I guess. Is it your job to find these kinds of security holes for another company, or do you do it just for kicks?
Does this mean that I need to rush to Paypal and transfer my positive balance in it entirety to my bank account, or can I feel safe that I can keep a few bucks there to pay for an odd Amiga game here and there on eBay?