In the words of the old Sonny and Cher tune ... the beat goes on and on. It seems that the cycle of discoveries of security vulnerabilities in new Microsoft software that was created to make its software softer safer is being perpetuated in SP2. The security firm Secunia reports that two vulnerabilities in SP2's IE when exploited together could potentially fool users into downloading a malicious file that impersonates a regular HTML document. Microsoft apparently is objecting to Secunia making this information public. In the meantime the hole is there and remains unrepaired. Unfortunately, in this drum beat, it is us innocent users that get nicked by the idiots and criminals who do not know about these holes until they are publicly disclosed to them. I wish (sigh) that some procedure could be set up where information like this cannot be publicly disclosed for X number of days. I have still have not installed SP2 - just sitting & waiting.