http://weuse.cash/2016/10/28/the-untrusted-setup/
http://weuse.cash/2016/06/09/btc-xmr-zcash/
Is the “Sybil zk-proof attack” a real threat?
Are cryptographic ring signatures superior to Zcash’s method?
There is lots of discussion on reddit as well: