Actually, what bugs me about this is not the flaw, every OS has those, it's M$'s decision not to tell anyone about it for 6 months, hoping that no black hat hacker would discover for themselves in the meantime. OpenSource OSes have just as many security holes, but they get patched within days or weeks, not hidden for months.