the person could have used a recent flaw on hotmail i am afraid to put the bugtraq link though because i might be banned but i am putting it anyway http://www.securityfocus.com/archive/1/320806