@gcupc Aha, an apparently-authorative source on the whole #efail thing, and a link to the paper draft: https://efail.de/

Seems like a little of column a, a little of column b.