Another researcher writes about security issues with the # image update process. http://url.federati.net/upo2W ... Holy kau, people! You’ve got to know better than running decompression tools as root.