If anyone is wondering what this is about, check out the recent discussions on the oss-security mailing list.

http://www.openwall.com/lists/oss-security/