Microsoft is fixing a flaw in its Passport service.  I wonder how long this unplugged hole has been around?  Apparently an unauthorized person could request your password, and then have it sent to a different e-mail address.  I personally haven't been affected by this, but it certainly doesn't dispel my paranoia about the Net.