from the not-really-a-surprise dept: Microsoft due to release security fix for Phone OS. One would think that after screwing up so badly in security for desktop OSes Microsoft would have learned its lesson right? I guess that this proves that the flaw is inherent in the architecture imposed by Win32/COM and now .Net. Good thing most new phones run Symbian.