Security flaw in PayMaxx software/service

Here is a very interesting (read scary) press release from Think Computer., if you have an outsourced payroll vendor it is a must read!

I wonder what Kim Cameron and others in the identity management domain would think?