The Windows Registry Adventure #7: Attack surface analysis (blogspot.com)