https://rud.is/b/2013/03/03/security-hobos/