awhile back, continental's iphone app was sending out confirmation numbers to strangers... incredibly bad security. I wonder if those bugs are starting to show themselves on the UA side as things merge...