evil jar attack technical post-mortem - View it on GitHub