insecure application user interface