There is now an explanation for how following the CERT standard would have prevented an exploit.
Merge branch 'master' of https://github.com/SecurityManagerCodeBase/Paper