So if Sun Secure RPC has been cracked this wide open, why hasn't sun taken any action? Indeed, why hadn't I heard before? I would have expected this paper (which I am now reading) to have been disseminated far and wide... Perry