Security blogger's latest whodunit comes with a twist