This work, along with a summary of our main findings, was disclosed to Microsoft employees via an internal blog post on 11/30/2015