How to steal $20M with session hijacking [video]
buzzfeed.com