| |
| | Wired News: Stealing MS Passport's Wallet (Site not responding. Last check: 2007-11-07) |
 | | The bugs in Passport, a sign-on service used by more than 200 million people, were discovered this week by Marc Slemko, a software developer who lives near Microsoft's Redmond, Washington, headquarters. |
 | | The attack raises new questions about the inherent security of Passport, which is being positioned by Microsoft as the linchpin of its.NET e-commerce service initiative. |
 | | Prior to being fixed by Microsoft, the authentication flaws discovered by Slemko could enabled an attacker "to do anything as if they were the Passport holder," including editing the user's portfolio at MoneyCentral, or changing user's auctions at eBay, he said. |
| www.wired.com /news/technology/0,1282,48105,00.html (720 words) |
|