when format strings attack

[Eric_Dexter at msn.com]

http://www.ddj.com/184405774;jsessionid=BDDEMUGJOPXUMQSNDLQCKHSCJUNN2JVN

I saw a warning from homeland security about this.  I only comment on
the because I am trying to use os.system('command1 arg') and it doesn't
work but I do see examples with % that is borrowed from the c language.
 Seems like if I can write a batch file that does something the same
behavior should happen in the os module..