I think @natashenka and I just discovered the worst Windows remote code exec in recent memory. This is crazy bad. Report on the way. 
-
Attack works against a default install, don't need to be on the same LAN, and it's wormable.
I assume it still requires *inbound* (routed) connectivity? I.e. something typical NATs and firewalls stop.
-
-
Because if this can be exploited by outbound connections, the world is going to burn. Especially if a web browser can trigger them.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.