Notes on Security, Sepeparation of Concerns, and CVE-2016-1238 (Full Disclosure) (ledgersmbdev.blogspot.com)