Yep. I imagine part of the rollback rage is because of stuff like that -- it's a bug that's been around for alongtime, and it didn't exactly go unreported, either. Also,this admin postdoesn't exactly inspire confidence that the developers understand the full extent to which the exploit was abused.