[antiRepublicrat]

Most hacks occur by insiders -- not external users.

Do you count ILoveYou, SQL Slammer and Sobig in those statistics, or do you treat each as one instance?

There are widely available tools which make creating a user with a custom rights mask no more difficult than point and click.

I didn't know that, but I'm not surprised at others making up for Microsoft's laxity. Same with the IIS wrappers we use. We always made our own accounts.

[Bush2000]

Do you count ILoveYou, SQL Slammer and Sobig in those statistics, or do you treat each as one instance?

Those are primarily, for all practical purposes, denial of service attacks. The statistics that I'm talking deal with network intrusions, where hackers intend to steal information and/or commit fraud.

I didn't know that, but I'm not surprised at others making up for Microsoft's laxity. Same with the IIS wrappers we use. We always made our own accounts.

Time to update your resume: MS has tools to do precisely what I described.