More XSS security bugs with MS Passport / MSN Chat let's one impersonate others and maybe do other stuff too. I've long said that Microsoft has all but ignored this issue, still failing to fix problems with there basic www.microsoft.com site.