As a long time user, fan, and I consult a bit to Hotspot Shield, I'm disturbed by this. But I'm not seeing how the CDT came up with their findings. I just came back from BlackHat and wonder why actual security researchers havent come to this same conclusion? I understand where there is smoke...