It's not a major risk. It's not [doing] either of the two things that are terribly damaging. One is hurting people's machines, and one is knocking things [off-line].

[Saturday's worm] is the recruitment of soldiers, not telling the soldiers where to aim their guns.

all the new PCs and the new Web servers, multiplied by the fear of top management about security breaches and business-stopping system failures, kept these salaries [growing] three times as fast as salaries [across all industries].

It is a situation where MCSEs had no idea that there is a fundamental vulnerability in IIS and ISAPI mapping and so had no way to protect their systems other than after-the-fact patching,

It would have been terrible (without the widespread patching). That got a lot of systems fixed.

That could be a real wave of traffic that the Internet has not dealt with.