Note this is relevant to the "X Protocol Security" talk given a few days ago that was mentioned here and at /r/programming.
Link?
All the links you need are in the first paragraph of danimo's blog post. If you're referring to the HN commentary Google is failing me but it can't be too many "Next" clicks away.