'Another security bug, this time in MAC verification...' thread