<A target="_blank" href="http://www.theregister.co.uk/2009/03/18/windows_token_vuln/">Microsoft was informed of the vulnerability </A>in March 2008. A month later it published workarounds. A year later, still no patch. Now hackers are starting to pry into vulnerable systems.