Microsoft just released SP1 RC1 (hat tip to SlashDot).
Two points here:
1. How weird is it to get news about Microsoft products from Slashdot? And to get it there first?
2. I like the term "attack surface". It seems to be a way to measure the vulnerability of a given server by factoring in security settings, running services and so on.