From the reports I've read it certainly isn't clear all the cases are phishing, I know a couple of people who had their accounts compromised and I cannot see th

From the reports I've read it certainly isn't clear all the cases are phishing, I know a couple of people who had their accounts compromised and I cannot see them entering their passwords stupidly. Perhaps there are dictionary attacks. Passport, the precursor "live id" was known to be flawed. It does make me wonder whether microsoft has added new features that need "hotfixing" to make their design secure.