[9767] in cryptography@c2.net mail archive
passport hacked
daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Fri Nov 2 19:24:39 2001
From: "Perry E. Metzger" <perry@wasabisystems.com>
To: cryptography@wasabisystems.com
Date: 02 Nov 2001 18:57:13 -0500
Message-ID: <87bsik3ew6.fsf@snark.piermont.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
http://www.wired.com/news/technology/0,1282,48105,00.html
Stealing MS Passport's Wallet
By Brian McWilliams
12:25 p.m. Nov. 2, 2001 PST
To correct serious security flaws, Microsoft on Friday disabled the
virtual wallet function of its Passport service and has begun
notifying partners about the vulnerabilities, the company has
confirmed.
The bugs in Passport , a sign-on service used by more than 165 million
people, were discovered this week by Marc Slemko, a software developer
who lives near Microsoft's Redmond, Washington, headquarters. Slemko
is a founding member of the Apache Software Foundation.
[...]
--
Perry E. Metzger perry@wasabisystems.com
--
NetBSD Development, Support & CDs. http://www.wasabisystems.com/
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@wasabisystems.com
