A full explanation of the 3 vulnerabilities he's found is at: https://www.youtube.com/watch?v=qkolWO6pAL8&feature=youtu.be