We built a fake web toaster, and it was compromised in an hour
theatlantic.com