Marc Slemko figured out how to steal people’s credit card numbers stored in Passport by getting them to open a Hotmail message, thanks to browser bugs and problems with Passport’s authentication system. The wallet feature of Passport has been disabled until the problem can be fixed.