Computers

Explanation of JavaScript in HTML attachments security hole, since fixed.

Microsoft's Web-based e-mail service suffered a damaging blow to its integrity Monday when a security breach came to light that made it so anyone's Hotmail messages could be read. By Robin Lloyd.

News and discussion.

Brief description of issue.

Late Sunday night, Root Core, a group of computer security experts, published information exposing vulnerabilities in Microsoft's popular service.

This isn't the first time that the folks who are gonna give us a internet wide universal login system had a hole. News and discussion.

Details of how to read other people's messages have been posted on a website run by a group called Root Core and it has quickly spread to other sites and newsgroups.

Describes a security hole by which a hacker can gain access to a user's Passport shopping profile by stealing their Hotmail cookie.

Passport authenticates a user for access to his credit cards and Web site accounts and passwords, to make life easy for on-line merchants and shoppers, and hackers and identity thieves. By Thomas C. Greene.

Some bright empiricist from Root-Core has discovered that anyone can log into their Hotmail account and then call messages from any other Hotmail account by crafting a URL with the second account's username and a valid message number. By Thomas C Greene.

Hotmail said it will mandate the use of cookies to plug a newly discovered security hole.

Microsoft's Hotmail today claimed victory over the security holes that have put the free email firm on the hot seat this week.

Microsoft's free Web-based email service Hotmail last night implemented a partial fix for a JavaScript security problem.

Article and discussion of HTML attachment attack.