The hotcrp conference management system treated it as a shell glob and leaked out the list of submitted papers, once.