[smb@cs.columbia.edu: serious threat models]