From the FAQ: > Q. Isn’t it bad to publish details of possible attacks? > We have omitted a small number of sensitive details from our attacks in order to avo

From the FAQ: > Q. Isn’t it bad to publish details of possible attacks? > We have omitted a small number of sensitive details from our attacks in order to avoid providing recipes that would allow an attacker to reliably defeat the screening process without having access to a machine for testing.