Passport Exploit Found (Again)

[Warren Togami]

http://www.wired.com/news/technology/0,1282,48105,00.html

Passport Exploit Found (Again)

"By cobbling together a handful of browser-based bugs with flaws in
Passport's authentication system, Slemko developed a technique to steal a
person's Microsoft Passport, credit card numbers -- and all, simply by
getting the victim to open a Hotmail message.  The attack raises new
questions about the inherent security of Passport, which is being positioned
by Microsoft as the linchpin of its .NET e-commerce service initiative."

Slashdot Commentary:

http://slashdot.org/article.pl?sid=01/11/02/2231248&mode=thread