Simon Willison’s Weblog

Not linking is not security. Ridiculous: Harvard rejects applicants who “hacked” by guessing a URL.