Thought it was well written. Would like to see a bit more focus on risk i.e. liklihood and impact explored a bit more. On specific vulnerabilities like this I

Thought it was well written. Would like to see a bit more focus on risk i.e. liklihood and impact explored a bit more. On specific vulnerabilities like this I like the CVE format: e.g. http://www.securityfocus.com/bid/38615/info http://www.securityfocus.com/bid/38615/info information / background, exploit, solution, then some discussion on risk