We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

Flaw in Hotmail reveals buddy lists

Web-based email in trouble again

Microsoft is investigating a complaint that expired Hotmail accounts retain the linked MS Instant Messenger buddy lists, and those lists are available to the next person who registers the same e-mail address on a Hotmail account.

Microsoft spokeswoman Leslie Hui acknowledged the company is aware of the problem, but didn't say for how long, or when the access to supposedly expired buddy lists would be closed off.

The glitch first came to light more than a year ago, when Dmitri Alperovitch, a software developer and part-founder of Encryption Software, left a message at the Bugtraq Web site in July last year in which he detailed the programming glitches. He didn't indicate that the possible holes had created any real problems.

"I don't think anybody really knew that contacts wouldn't be cleaned out," said James Nelson, a systems administrator at Cisco Systems. Recently he found out otherwise.

On 14 August Nelson posted a warning at Bugtraq. He wrote that when his account expired after four months of inactivity, he tried to reregister it. Microsoft employees told him his account had never existed, so he registered the same account name from scratch. To his surprise, he wrote on Bugtraq, his old buddy list came up.

Later, he wrote, someone else was using his identity from a different account that he no longer used.

"One day, someone unknown appeared in my contacts' list. Turned out that someone had registered that (by then canceled) account, and had inherited my contacts' list," Nelson wrote in the posting.

"The first time, I thought it was a fluke," Nelson said in a telephone interview. "It's not a huge thing, but it is sort of disturbing."


IDG UK Sites

Sony Xperia Z3 Compact review: A better deal than the Z3 and most smartphones

IDG UK Sites

Why people aren't upgrading to iOS 8: new features are for power users, not the average Joe

IDG UK Sites

Framestore recreates ancient China for Mr Bean's martial arts misadventure

IDG UK Sites

iPad Air 2 review: Insanely fast and alarmingly thin. Speed tests, camera tests and more