We just finished writing a proof-of-concept DoS exploit for the <!-- bug recently found in AIM (at least for Windows..). It can be found at: http://sec.angrypacket.com Under the 'code' section. -- Tony Lambiris [methodic@slartibartfast.angrypacket.com] http://www.openbsd.org && http://www.openssh.com "Anyone who truly understands the power of UNIX wouldn't use anything else."