Stealing Microsoft Passport’s wallet

Wired.com has the story, under the heading of “insecure e-commerce.” Here’s how the story starts: “To correct serious security flaws, Microsoft on Friday disabled the virtual wallet function of its Passport service and has
begun notifying partners about the vulnerabilities.”