Well, when i wrote that it was a bad week for Microsoft, I didn't think it could get any better, but now they've excelled themselves. They've just released a fix for a bug in their virtual machine for Java which allows Java code to circumvent the sandbox and execute abitrary code on the client. Good old Microsoft, leaving no hole unopened as usual.