http://www.ovoid.com\index.html/security_audit.html