so basically they demonstrated that the oss security model, as it operates today, is not working as it had been previously hoped. it's good work and i'm glad t

so basically they demonstrated that the oss security model, as it operates today, is not working as it had been previously hoped. it's good work and i'm glad they've done it, but that's depressing. now what?