Found among M$ blogs.
1) Andy Rich says, "I love when customers find bugs!"
He must be a happy man then. Maybe one day he'll realise it's even better when customers find and fix bugs.
2) Brian Johnson's blog is titled BufferOverrun. Bad omen, or what? Sure enough, the top post is a Security Bulletin - the GDI+ vulnerability.