[antiRepublicrat]

In any case, this little bug takes care of the first half of breaking your system - surreptitiously running my code on your box.

It's definitely serious, but it does require a bit more work to get on your system than someone reading an email or visiting a web site, or just being on the net period.

I wonder if this is going to be handled by Apple as a virus issue ("update your antivirus") or if they'll fix the bit that allows the program to appear as an innocent file. I don't always trust Apple to do the right thing.

[general_re]

Closing the file-type hole is the way to go, IMO. Pushing the problem off to third-party AV vendors would be a mistake.

[general_re]

Of course, it's not like there's no precedent for pushing the problem off onto third-party vendors - they could pull a Microsoft move out of their hats ;)