How NOT to handle security concerns