My post will not get as much press as Slashdot , but here is some postings from sources at MS, including Bill Staples on the SQL Injection attacks that help clarify things. http://blogs.technet.com/msrc/archive/2008/04/25/questions-about-web-server-attacks...(
read more)