Security Vulnerability in Microsoft .NET Passport

Stuart Moore writes "A vulnerability was reported in Microsoft .NET Passport, also affecting Hotmail user accounts. The simple flaw allows an attacker to change any person's password to an arbitrary value. The attacker can then gain access to the victim's accounts, as well as to the victim's personal information (if any is stored w/ Passport). Muhammad Faisal Rauf Danka posted a note to the Full-Disclosure security e-mail list after multiple unsuccessful attempts to contact Microsoft." There's a news report as well.

Comments

Re:thoughts

[Kredal]

A "stupid person" alert from someone who spells "woop" with zeros. I'm not sure who's the stupider one here... (:

Thanks for the spelling fix though, I'll keep that in mind.

And to the AC above this who posted the same thing, it's "Freedomish", not French. d: