Two random tips

• When trying to change an Exchange password using Outlook Web Access at $UNIVERSITY, a user got "Error number: -2147024891". winerror.h describes this as a General access denied error. In the end, it turned out that when the account was created, the "user cannot change password" option was checked. Hope that'll help someone else's google-fu…
• I had managed to miss this quick command-line check for Dan Fucking Kaminsky's DNS bug, aka CERT VU#800113. Just run:

dig +short porttest.dns-oarc.net TXT

and watch the skies.