"The method is seemingly simple, but the fact that the thieves knew to focus on this particular vulnerability marks the Citigroup attack as especially ingenious

"The method is seemingly simple, but the fact that the thieves knew to focus on this particular vulnerability marks the Citigroup attack as especially ingenious, security experts said." Experts? Really? They weren't hacking experts, I guess, because this is a really easy thing to think of. Any good coder specifically prevents it, in fact.