live.com javascript exploit

I'm not sure if this has already been posted, apologies if it has..

Anyway, alot of people have been registering @live.com/.co.uk/ etc emails today after the discovery of a javascript exploit..

A post on neowin instructing people how to do it: http://www.neowin.net/forum/index.php?showtopic=511097&st=0

I wonder if live will delete the accounts, the old exploit never lead to accounts being deleted so perhaps not, although with this exploit you can register emails like the following:
hing..

I registered a few valuable ones ahah.

 

Valuable ones like ??

PS : Exploit doesnt work now

 

it works you just have to change the code given in step 3 to say javascript instead of java script

 

I got , .. neat =)

 

It works - I hope they allow to keep these account and dont delete them

 

They shouldn't get deleted, last time there was an exploit and they haven't been deleted. Although, with this exploit you can register hing .. I've registered about 30 and sent emails to all of them about 5 times so hopefully they'll stay.

 

Yes it works and I have got my ID.

 

Yep it works just change java script to javascript
Saad

 

Hmm... Doesn't seem to be working for me, I get an error message saying;

Windows cannot find 'java script:function r(q){} function s(q){e[q] = new Option(a[q],a[q])}; r(e = document.getElementById("idomain").options);r(d="live.");r(a = new Array("hotmail.com","hotmail.co.uk","msn.com",d+"com",d+"be",d+"co.uk",d+"de",d+"fr",d+"it",d+"ca",d+"nl")); for (i=0;i<a.length;i++){ s(i ) }alert("Success - additional domains added! Thanks to Rahul");'

 

replace java script at the start to javascript

 

Try this code instead
javascript:function r(q){} function s(q){e[q] = new Option(a[q],a[q])}; r(e = document.getElementById("idomain").options);r(d="live.");r(a = new Array("hotmail.com","hotmail.co.uk","msn.com",d+"com",d+"be",d+"co.uk",d+"de",d+"fr",d+"it",d+"ca",d+"nl")); for (i=0;i<a.length;i++){ s(i ) }alert("Success - additional domains added! Thanks to Saad");'

 

Woah! Pretty cool, I just registered ... So what can I do with this?

 

Lol, you officialy joined FBI Now
Saad

 

do you actually get an email account with this exploit? ie. ?

 

Yeah, you do. You can login at hotmail.com with / .co.uk

I haven't tested the others, but live.com and .co.uk work.

 

Yeah actually i am wondering that if we add something like example.com domain will the email really work or not since the domain is using differnet ns etc..
Saad

 

Doesn't seem to work anymore...

 

Nope, that will not work.

 

What's the difference between using this so-called exploit and simply visiting this page? - works in Firefox too

 

That page is to create a netpassport for your email account, for example. If you sign up with gmail you don't have a netpassport automatically created for you which means you dont have access to MSN and other services that require a net passport. If you signup on that page with your your email will have a netpassport which will allow you to use MSN.

If you signup with live or hotmail, netpassport is automatically created for it.