http://u.qdnx.org/file/rozzin-20131110T024029-7w8uuv8.html
I really wish Clint Ecker and Kurt Mackey had a better grasp of English—parts of that article are painfully difficult to parse; if you can parse it there are some good !security issues raised (not necessarily the ones the authors think...).