My technique for hotmail would be h4xxx0rz the guy's box and change his hosts file to point it to some other box running unix and do a man in the middle SSH attack...but is it really worth it just to read some poor sucker's mail?