While it may not be clear what the vector for this particular incident was, here's a defcon presentation about some of the general issues: <a href="http://www.defcon.org/html/links/dc-archives/dc-16-archive.html#Tottenkoph" rel="nofollow">http://www.defcon.org/html/links/dc-archives/dc-16-archive.h...</a>