https://ma.tt/2004/12/security-advice/