Closing the Open Door of Java Object Serialization | Hacker News Reader