Why only slightly better? The response to that forum post, as far as I can tell, means EC2 is not vulnerable to this attack.