Thanks to Steve Bellovin for the link. Steve also pointed out that the Wall Street Journal carried coverage today about a conference where that work was presented — apparently the conclusions are rather controversial. Having just read the paper, though, I'd say it looks like pretty good work assuming the results are reproduceable.