l0pht releases advisory for Cactus Softwares' Shell-Lock

"Severity (a): Users can de-obfuscate and retrieve the hidden shell code Severity (b): If a shell-locked binary is setuid root a user can execute any command as root." Worth looking over, no?