Least Authority's Security Audit of Cryptocat
leastauthority.com