User exploits

[xrath]

Just read this paper and thought it was quite interesting:
http://www.dimva.org/dimva2004/material ... rPaper.pdf

Just wondered what everyone else thought in regards of using ACLs to protect from alias trojans etc.