I have read that to exploit the vuln., they need a credential... so a user and password...
So i didn't updated or converted anything so far... I do trust each of my customers mostly because they are all ( except one ) completely computer illeterate

They are the kind of people to thing internet is their browser...
