the flaw he speaks of was the storing of passwords in easily recovered format outside the keychain. The patch moved the passwords to the keychain, but causes certain passwords, if set, to trigger the loop. So yes, the security update fixes the security problem, and causes the looping for certain users. (that have PPP passwords saved, typically)


I work for the Department of Redundancy Department