No time for commentary at the moment, but if you write ASP.Net applications, please head to http://www.microsoft.com/security/incident/aspnet.mspx and act accordingly.

- G