On Jan 15, 2010, at 9:21 AM, Gadi Evron wrote: > On 1/15/10 4:07 PM, Bruce Williams wrote: >> As if the old threat models weren't bad enough... > > The old threat models were simply not up to date. Precisely correct. This has been going on for quite some time; some people simply weren't paying attention. --Steve Bellovin, http://www.cs.columbia.edu/~smb