By someone who pays a lot of attention to security matters, and who is trusted by a lot of people here. I recognize (and called out) that it's not nearly as good a source as might be available, but like I said I happened to have it at hand, and it's certainly better than nothing.