Doesn't disclose how he was hacked...I assume he had to accept a forged SSL certificate at some stage?