In July 2004, security researcher Stefan Esser sent a warning.