securityreactions:

Vendor releases code update for an appliance the Admins have in production. In pre-testing the Admins discover that the Vendor left in some development glue and calls to a hidden API. The results that the Admins get from the testing box are somewhat interesting, then someone asks “Y’know, I wonder if…” while looking at the Production appliance.