It's a tricky problem, even before you consider false-positives and the false sense of security in general.
Reply on news.ycombinator.com