With the prevalence of Apache webservers out there, this is a fairly disturbing bit of news. Will be interesting to see what types of mitigation folks employ to defend against THIS.
Some recommendations for protecting against this type of attack are HERE and HERE, but there may be some impacts on "normal" usage as well.
