Check this one out: Hacking Sprint accounts online made easy. Definitely read the page it points to, here.

Yikes.

I’m subscribing to his blog now (you should too if you care at all about security!). :)