Silicon Investor (SI) -- The First Internet Community

STOCKTALK

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor. We ask that you disable ad blocking while on Silicon Investor in the best interests of our community. If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.

Politics : PRESIDENT GEORGE W. BUSH -- Ignore unavailable to you. Want to Upgrade?

To: portage who wrote (421633)	7/2/2003 1:32:38 AM
From: Skywatcher	Read Replies (1) \| Respond to of 769667

While we spend BILLIONS spying on EACH OTHER.....MICROSOFT is single handedly allowing TERRORISTS to get FRIGGIN PASSPORTS!!!!!!!! Ever get the feeling that.....never mind....... ONE BIG JOKE! Microsoft admits another flaw in Passport identity service Tuesday July 1, 8:40 pm ET By Ted Bridis, Associated Press Writer WASHINGTON (AP) -- Microsoft Corp. said it has fixed another security flaw in its popular Internet Passport service that could have allowed hackers to hijack some older accounts. Microsoft senior manager Jeff Jones said Tuesday that he believes no Passport accounts were stolen. Jones declined to say how many people were at risk but said the flaw affected only a small number of users who had created their accounts more than four years ago. As part of its repair efforts late Monday, Microsoft briefly prevented some Passport users from manually changing their passwords. Passport, which offers consumers a convenient method for identifying themselves across different Web sites, also controls access for Windows users to the Hotmail e-mail service and instant-messaging accounts. "To the best of our knowledge, no one exploited this," Jones said. Microsoft said it learned about the vulnerability after a self-described security consultant published details to an Internet discussion list, a practice that has increasingly frustrated executives who prefer researchers to quietly work with software vendors to resolve such problems before announcing them publicly. The consultant, who identified himself as Victor Manuel Alvarez Castro of Mexico, wrote that he tried unsuccessfully to contact Microsoft "several times" by e-mail. It was the second admission by Microsoft of a serious vulnerability in Passport since last summer's settlement with the Federal Trade Commission, which had accused Microsoft of deceptive claims about Passport's security. In response, the company pledged to take reasonable safeguards to protect those accounts and submit to audits every two years for the next 20 years or risk fines up to $11,000 per violation. In May, a Pakistani computer researcher determined that by typing a specific Web address that included the phrase "emailpwdreset," he could seize any Passport account. The FTC still has not determined what sanctions and fines, if any, to assess against Microsoft in that incident. CC