IP: passport hacked

[David Farber <dave () farber net>]

> From: "Perry E. Metzger" <perry () wasabisystems com>
> To: cryptography () wasabisystems com
> Subject: passport hacked
> Date: 02 Nov 2001 18:57:13 -0500
>
>
>
> http://www.wired.com/news/technology/0,1282,48105,00.html
>
>
> Stealing MS Passport's Wallet
> By Brian McWilliams
>
> 12:25 p.m. Nov. 2, 2001 PST
>
> To correct serious security flaws, Microsoft on Friday disabled the
> virtual wallet function of its Passport service and has begun
> notifying partners about the vulnerabilities, the company has
> confirmed.
>
> The bugs in Passport , a sign-on service used by more than 165 million
> people, were discovered this week by Marc Slemko, a software developer
> who lives near Microsoft's Redmond, Washington, headquarters. Slemko
> is a founding member of the Apache Software Foundation.
> [...]
>
> --
> Perry E. Metzger                perry () wasabisystems com


For archives see:
http://www.interesting-people.org/archives/interesting-people/