I think the parent poster's point was that Bing only has to convince a script kiddy to to run a command, it doesn't need full outbound access