Ooops
Note to self: Contact former employer, let them know of security hole I put in.
http://rdist.root.org/2009/10/29/stop-using-unsafe-keyed-hashes-use-hmac/
http://rdist.root.org/2009/10/29/stop-using-unsafe-keyed-hashes-use-hmac/