How a mistakenly published password exposed Mercedes-Benz source code