[ShadowAce]

Yup--Also "the attacker would have to be within the LAN in order to make the attack work, and, of course, it would only work on systems using ICS, which is disabled by default. Furthermore, the attack would have no effect on any third-party firewall being used by the PC"

[perfect_rovian_storm]

Short sighted thinking there when it comes to the 3rd party firewall. If the attacker can shut down the Windows firewall, what else could the attacker do if they are interested in doing something? There would have to be a hole that would allow them to run their code to shut down the firewall. If they've breached the system to that point, they can likely do any number of other things that might not be in the proof of concept code.