It's funny to see how many people think this is peculiar to philly. This is HN, where people think it's ok to use SQL injection attacks against a website as long as the server responds 200 OK. If you as the operator don't want that to happen, then you need to build a better server to prevent it. Is it such a stretch to say if you don't want your robot vandalized, you need to build a better robot?