There is a ton of discussions about this in the security forum. Please conduct a search or go through the threads.