Best advice yet on the WMF exploit

Jesper Johansson on Conscientious Risk Management and WMF.

(Thanks to Ryan Naraine for the pointer.)