from the “no-surprises-here” department – it looks like the msn messenger has loose handle on privacy:
“If you are running MSN messenger (and have JavaScript enabled) you should see your name displayed below, along with a list of all your contacts.
If this page was hosted on microsoft.com, hotmail.com or hotmail.msn.com you would also see your email address and your contacts email addresses .”
“However third parties could get access to the email addresses, by simply adding a single entry to your registry. That would require a little more effort, but is easily done.
e.g. Installing software which contains “spyware” or “adware” .”
it only works if you’re using the dynamic duo of messanger and ie. fun stuff.