Hijacking Open Standards

• Microsoft implemented Kerberos authentication in Windows 2000.

• Microsoft used a field that was defined as unused in the specification

• This effectively prevents non-Microsoft machines from using Kerberos authentication with Windows 2000 systems

• Microsoft threatened to sue Slashdot http://www.slashdot.org, when they released details of Microsoft's implementation