cross-posted from: infosec.pub/post/29612746