Related story about the recent extension of the attack vector: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=11574753" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=11574753</a>