Hacker News Reader

But how do the special file names cause security issues? Or are they just an example of general cruft?

Mostly an example of cruft, although I do see the potential for this unexpected behavior to cause software to misbehave or crash.