Jouster's Journal: Hotmail Needs a Lock on its Cookie Jar

Wired is running this story on a frightening vulnerability in Hotmail: apparently, Hotmail cookies amount to little more than boolean "has access" variables. Once you have someone's Hotmail cookie(s), you can log on repeatedly, even if they change their password.

Or....

[Jouster]

As was suggested today, two locks.

And a towel [google.com].

Dan