How a harmless-looking asterisk could let an attacker log in, how to tell whether you are exposed, and how to fix it safely
