Presentation is available at:
http://www.argeniss.com/research/TokenKidnapping.pdf 

Exploit code won't be released for a while due to
Microsoft request.

Enjoy.

Cesar.


      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ