I am sorely tempted to heap ridicule on Stephen Toulouse, the program manager for the Microsoft Security Response Center who had the unmitigated gall to lecture Apple on how to do security alerts. But I won't. It's too easy. Mr. Toulouse doesn't need me piling on. He's self-satirizing. But I hope he and other Microsoft employees do learn a little lesson from this. Nobody from Microsoft has the right to tell anybody anything about security until they get their own house in order. And in a week when two more critical vulnerabilities were revealed in Internet Explorer, the day Mr. Toulouse could start a new career as a security lecturer doesn't seem to be coming any time soon.