Just FYI:
http://adamcaudill.com/2013/04/04/security-done-wrong-leaky-ftp-server/

//wbr Vasily