For security bugs that are too sensitive to report publicly, please email me at colin@colincogle.name. Please encrypt your content with the PGP key 0xCEFEEDFC.