I somehow thought it was my work not allowing the address cause it was a blank white page.. and then when I logged on with my crackberry at home it came up last night. I though, fark.. don't tell me I have to use my crackberry for the org from now on....
But all good.
Attack probably could've come from anywhere, I see your point Tom.. and I know one shouldn't ever 'discredit' people for having the smarts to do such a thing.. but realistically, I don't think the capability is there for someone to attack the 'niche' market as suggested.
But, then again.. you never know.