A difficult problem domain, yes... so where was the staged rollout? The penetration testing? Why did it take so long to disable the bot after reports of the exploit surfaced? etc.