Feature or flaw? How to hijack a Windows account in less than a minute

By the researcher's own admission, he's not sure if it's a newly-discovered security flaw — or a feature.