Nate:  I am still worried that with the hundreds of millions of web sites that are going to be vulnerable there will be wide spread use of GIFARs for exploits long before all of our web servers, browsers, etc. can be fortified.  Just like sequal injection is a generic attack that billions of web sites are vulnerable to and the problem will never go away as long as people use sloppy coding which is forever. :-)

I can't argue that researchers should not uncover these things but this one is a doozy!  Right up there with the DNS vuln that we will get fuller disclosure on this week. 

RS