followup to the MSN hotmail and .Net passport change post

From: Dan Hanson (dhansonat_private)
Date: Wed May 07 2003 - 22:17:55 PDT

  • Next message: Stephen P. Berry: "Re: DNS Injection Problem"

    There are differing reports on the effectiveness of this attack. Our
    testing here indicates that an older hotmail account is vulnerable, but a
    newer one is not. It is unclear what the difference is, other than when
    the account was created.
    
    
    
    
    ----------------------------------------------------------------------------
    Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
    world's premier event for IT and network security experts.  The two-day 
    Training features 6 hand-on courses on May 12-13 taught by professionals.  
    The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
    sales pitches.  Deadline for the best rates is April 25.  Register today to 
    ensure your place. http://www.securityfocus.com/BlackHat-incidents 
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Wed May 07 2003 - 22:32:08 PDT