Of course it is.
Then there is a bug and you fix it just like any other security layer.
Reply on news.ycombinator.com