Microsoft is going to have to take a stand and make this the last XP patch (for anyone not paying for extended support like certain governments) forRealThisTime if they ever want to move on.<p>In this case, I can understand the reprieve, if only because it came like 20 days after the EOL. In fact, you almost wonder if this wasn't publicized until after the EOL in an attempt for malicious parties to do maximum damage.<p>But this won't be the last hole. Others will exist and if Microsoft doesn't stop from now on, it won't disappear until web standards change to such an extent that all versions of IE that run on XP won't render modern sites at all.<p>Kind of a good reason, in retrospect, to decouple the web browser from the OS, huh?