https://research.aurainfosec.io/advisory/snafu/