The programmer accidentally uses the wrong operator, which changes the application logic in security-relevant ways.