"...The bugs in Passport, a sign-on service used by more than 200 million people, were discovered this week by Marc Slemko, a software developer who lives near Microsoft's Redmond, Washington, headquarters. Slemko is a founding member of the Apache Software Foundation....

"By cobbling together a handful of browser-based bugs with flaws in Passport's authentication system, Slemko developed a technique to steal a person's Microsoft Passport, credit card numbers -- and all, simply by getting the victim to open a Hotmail message...."


http://www.wired.com/news/technology/0,1282,48105,00.html

Microsoft and security? :cool:

Originally posted by Walter
Microsoft and security? :cool:



I know, it's an oxymoron.

MS stopped the service now...

Originally posted by Walter
Microsoft and security? :cool:
Somehow it doesn't make a perfect couple, eh? :D I reported an error in their login sessions about 14 months ago. Guess what? They still didn't fix it.

Why am I not suprised.