How I pwned a major New Zealand service provider