DANG. That might be a bit harsh. I mean sure, the guy who would attack a site like FA is a total jerk, but *executed*?
I'm up for a good old fashioned drawing and quartering. That's the traditional method for executing hackers, isn't it?
Created a login mostly to say, lay off the criticism of the FA team.
Obviously, given the nature of this sort of fandom, I'm not going to say where, but I work as the lead developer for a state government website. Underfunded, because voters on both sides think money grows on someone else's trees, but still better funded by about 2 orders of magnitude than I expect FA possibly could be, with a team maintaining the site code, a separate DBA, and a separate network team and a network security specialist who was one of the more respected experts in the field. We work with the other states, and federal, same-state and local agencies, attend training, monitor internet chatter about our site, watch the logs, have network monitoring 24/7, port sniffing, pen testing, forced regular password changes and timeouts, keep everything as up to date as is wise to do, and we still have been hacked. And we do better than some of our peers who have much bigger teams, much greater resources. Microsoft, Google, Amazon, Home Depot, every single one of the Fortune 500 companies, every state and federal agency you're likely to be aware exists, have all been hacked. The current rule of thumb for security in the industry is that you've either been hacked, or you've been hacked and you don't know it yet.
Money, resources, expertise and vigilance are not enough. All you can do is try to prevent it as best you can (which they've obviously done or FA would have been down long ago), and do as much as you can to be ready for when it does happen.