Oops - two questions in the last 30 minutes ask where I saw the report. It's been posted to comp.org.usenix; I'll forward a copy here. --paw