Read about it here. http://www.wired.com/threatlevel/2008/0 ... ky-on-how/

That was two years ago. I expect the problem has been fixed by now.