] by typing a specific Web address that included the phrase
] "emailpwdreset," he could seize any person's Passport
] account and change the password associated with it.

Salon.com Technology | Microsoft admits Internet Passport was vulnerable