When I saw the nimda hack lock my player up it was requesting a URL which contained escaped characters. Unfortunately there was no debug information presented that would have indicated what request caused the problem, as the only thing on the serial connection were error messages indicating that requests had failed. Unless of corse the last failure also caused the lockup after displaying the error.