Ever been logged in at ikea.com? Then there's a chance you don't surf very anonymously.

A company offering an online project and customer relationship management system had a very easy-to-spot SQL injection vulnerability for 10 years or more.

Is your gym telling on you? It sure was telling on me and my fellow members. Everything from contact info to pictures to bank account numbers to the time people enter the gym was leaking for a long, long time.