http://geer.tinho.net/geer.blackhat.6viii14.txt - some more technical analysis on what can be done

Another interesting site here is http://citizenlab.org/ and the idea of 'distributed security' they champion.