http://it.slashdot.org/story/10/08/0...-Security-Hole
One of the first things I learned about memcached when first experimenting with it, was that it had no authentication/ACL mechanism, and so I thought "better make sure it's firewalled or not listening on a routable interface/IP".
So how did PBS and others not think that too?