I think all it requires is some GET requests on behalf of the user whose details you supplied.
I guess if you, as a user, can see your address book, you can also see it when you retrieve the HTML associated with the address book. You can use stuff like Microsoft's XMLHTTP to do this even with ASP if you want.
Once you have the HTML source, it's a matter of parsing the content, retrieving the address information and possible paged links to other pages in the address book.
Personally, though, I would never give a site my Yahoo or Hotmail ID and password, but that's just paranoid me....
Cheers,
Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.
|