asp.net padding oracle: how it relates to getting the web.config, forg

provides clarification of what was really exposed by the recent padding oracle vulnerability, and how it allowed getting different levels of access.