The annoying thing to me about the Cigital mess is how easily some news outlet's picked up the story. The culture is that if it's microsoft and a securtiy vuln it gets to be an instant headline regardless of the merits of the claim. Meanwhile I feel bad for Cigital because any company with a clue will avoid them and thier services. There are probably plenty of people there with some smarts, but when the morons win the whole company get's to feel it for a long time. If I'm really giving them the benifit of the doubt then they got tripped up with the documentation's comma: "You can use this option to detect buffer overruns, which overwrite the return address." However I sorta doubt most people would be aware of the feature if it wasn't for thier press releases. 

6:41:26 PM    comments ==

My cat, Tegan, would like to sign up for this protest.
11:58:50 AM    comments ==

Enron could have gone a lot differently if they had gone with sprint.
11:03:34 AM    comments ==