I think the blog entry from the MSRC should be credited to Mike Reavey, rather than Stephen Toulouse. It does indeed associate the post with "stepto", but the post begins:

"Hi everyone, Mike Reavey here."

If you read through the blog, you'll notice that each and every post is tagged "stepto", even some that he clearly didn't write.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/187/895#895