Microsoft better shape up
Poster: Aron Schatz
Posted on May 9, 2003 at 5:10:16 AM
Remember when Microsoft made a promise to the FTC about its passport system? Looks like they didn't tell the whole truth. This passport bug better get fixed soon, or Microsoft will have more to worry about than it does now.
Quote
On Thursday, the software giant was scrambling to determine the impact of a flaw in the password reset feature of its Passport identity service. The vulnerability, first reported by CNET News.com, could have allowed attackers armed only with a Passport user's e-mail address to access information such as the user's name, address and credit card number.