Fear, uncertainty and and the padding oracle exploit in ASP.NET

Here’s a good look at what the padding oracle exploit does to ASP.NET apps and how Scott Guthrie’s mitigation guidance makes good sense. If you’re responsible for an ASP.NET web app, this affects YOU.