Yes, clearly if you are not concerned about missing 50-75% of First Virtual's users, this attack will work just fine. -simson