Flaw in Microsoft's Passport.net

http://news.bbc.co.uk/1/hi/technology/3013665.stm


:)

I would have said who cares? it's IM and spam email accounts, what's the big deal? Then I read this part:Some online businesses use Passport as an ID guarantee to let people access personalised accounts and buy goods or services online. Madness really.

there hotmail servers get attack loads, people do dictinary attacks and it returns if an email addy is correct or not.
they found a pc that had been doing 4 attacks a second and had been going for 7 months.

and there a loads fo computers doing it.

scroots

Add up that potential FTC fine ... $2.2 trillion is quite lot, even for Microsoft :rolleyes: