>Are you saying the Microsoft exposed part of their intranet to the Internet without a firewall?

See my reply elsewhere in this thread. That's about all I know on the issue, and even that was gleaned from rumors on the Internet, and not from any internal Microsoft information.