https://www.eff.org/deeplinks/2011/09/open-source-security-auditing