Just wanted to point out that tptacek is the blog post's author (and a veteran security researcher).