i dont think its any one thing, its a combination of reasons in all of your posts....except the laziness factor. i dont think any of the programmers for microsoft are truly lazy, they just want money and i think they truly dont care much about security right now. they are excellent programmers they just do not spend years on each product release. ($) it would be nice if their software would show that they are excellent programmers