How the NSA beats 0-days
nakedsecurity.sophos.com