http://msdn.microsoft.com/msdnmag/issues/04/04/SecurityBriefs/default.aspx