The hacker also demonstrated how the security flaw allowed them to remove users by deleting SAN's test account. A message ...