Google Online Security Blog: Help us fill in the gaps!
ED: Read the comments!
http://googleonlinesecurity.blogspot.com/2007/11/help-us-fill-in-gaps.html