https://rud.is/b/2012/07/02/2012-whitehat-security-website-security-statistics-report-redux/