As for objections about how worthwhile this is, it's pretty clear that a patch will be available for this problem before we can finish and publicize an exploit.
Which makes an exploit all the more useful. If an exploit was published well before a patch would be available, people would make accusations that the exploit publisher was aiding vandalism. (Warranted or not, 8lgm gets these accusations, etc.) Publishing the exploit after the patch is available means more of an incentive to go get the patched version. I for one, haven't picked up the patched netscape yet. -- sameer Voice: 510-601-9777 Community ConneXion FAX: 510-601-9734 An Internet Privacy Provider Dialin: 510-658-6376 http://www.c2.org (or login as "guest") sameer@c2.org