Comment on the Apple curl security incident 12604 | daniel.haxx.se
Oh it’s so much worse than that. Part One Part Two