Hi qwerty
I am totally not getting this. Firstly i tried to execute the attack you described on myself and all i got was * No such identifier: #$q
Secondly i cant understand what you are talking about??? perhaps am thick but i tried to follow what you are saying and got lost. Could you give me a real life simple example on how a script can be misused by sending unknown content to a timer? and why a timer more then any other medium??

Thanks