@itworks4sierra: the vulnerability