Penetration Testing: Dead in 2009