The scary thing is that you already have a trust relationship with the RSS feed. If that gets nailed, you're not going to know it until its too late.

I've had suspicions about this vector from the beginning but again, my fears are closing in on reality. I've already spoken to some friends on the inside and they're telling me that certain AV vendors have a decent foothold on developing scan engines to deal with this. Time will tell how well the design works.

--TH13