Recovering files using /proc (and spying, too!)