Well, as I am not really working, just a quick one: http://isc.sans.org/diary.html?storyid=6787&rss

Roger