this MSRC saga seems destined to be canonized as an almost flawless example of how to implode community trust in a security setting through entirely unforced errors