Microsoft Passport to Trouble - interesting use of browser bugs/limitations. By some very simple means he breaks into any users account on MS Wallet.