I'm not from Google, but this seems a little to slick of a presentation. They already have a glossy website with a custom domain name, complete with bios on the authors. Just because it's associated with BlackHat doesn't mean it's a class 1 emergency. Reading up on the details shows that it's a pretty slim window of attack.
But I'm just a skeptic, not an expert. I'd love to hear from the security specialists at Google on this. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscr...@googlegroups.com. To post to this group, send email to google-appengine@googlegroups.com. Visit this group at http://groups.google.com/group/google-appengine. For more options, visit https://groups.google.com/groups/opt_out.