Observed weaknesses in security dynamics' client/server protocol