Well then i guess M$ gets 60 days to disclose. Do you honestly think that it will take that long for someone to publish. I mean, I'm all for complying with RFC s (even though you can't ping my box) but someone will disclose the vulnerability before 60 days I'm sure.