[FD] Defense in depth -- the Microsoft way (part 41): vulnerable by (poor implementation of bad) design