Most interesting to me was the response from the MS Security Response Centre: "[T]his is not a valid vulnerability ... [It] relies entirely on social engineerin

Most interesting to me was the response from the MS Security Response Centre: "[T]his is not a valid vulnerability ... [It] relies entirely on social engineering." This narrow view of what constitutes the system shows that MS Security is seriously flawed. If you run hosted software you have to consider the security aspects of the total system, including support and other human factors. Seems like MS is stuck in the mindset of shrink-wrapped software.