What I'm not hearing is that what that really means. It's not just the buffer overflow thing. It seems that most of these tools (he exploited 3 so far) are disa

What I'm not hearing is that what that really means. It's not just the buffer overflow thing. It seems that most of these tools (he exploited 3 so far) are disabling protection feature in the OS and are just blind to the risk parsing generally presents and specially for a tool that runs with such privilege. I wonder if he has failed to exploit any of the antivirus that he tried or it was 3 for 3. What does it really mean, does using any antivirus at this point puts you at even more risk to targeted attack specially if you are a sensible user? What does that mean for corporate roll out of antivirus which I'm guessing would be the most likely candidate of such targeted attacks.