April 26, 2002
http://www.wired.com/news/technology/0,1282,52115,00.html
http://www.wired.com/news/technology/0,1282,52115,00.html
MSN Hotmail users, guard your cookies. A simple technique for accessing Microsoft's free e-mail service without a password is in the wild and apparently being exploited. The trick involves capturing a copy of the victim's browser cookies file. Once the perpetrator gains two key Hotmail cookies, there's no way to lock him out because at Hotmail, cookies trump even passwords.
Posted by rshah at April 26, 2002 12:00 PM