It should be as simple as this:
if ownership changed and new owner has no prove of purchase (paypal invoice,escrow.com, trusted escrow agent etc..) domain should be returned to previous owner.

--
Bashar Al-Abdulhadi
Founder, President & CEO
KuwaitNET Internet Services
P.O. Box 1230, Dasman 15463, Kuwait
T: +965 - 80 70 60 | F: +965 - 484-0110


Wendy Seltzer wrote, On 1/2/2008 7:25 PM: 
Brendler, Beau wrote:
 > <http://www.davidairey.co.uk/google-gmail-security-hijack/>

Interesting reminder how tenuous and insecure domain name "ownership" is.

  
Maybe we can help this guy somehow? 
    

"UPDATE December 28th: You left over 400 comments on my original post
(now located here on my .com domain). My domain name has been returned,
and you can read how it happened in this blog article." linking
<http://www.davidairey.com/david-airey-dot-com-restored/>

However, we might well want to look into ways (including education) by
which individuals could keep their domains better secured.

--Wendy