Note two security issues