Re: POP3 passwords

JGrimshaw_at_ASAP.com
Date: 10/20/03

  • Next message: Jorge Garcia: "problems with ttysnoop"
    To: "Zachary Mutrux" <zmutrux@compumentor.org>
    Date: Mon, 20 Oct 2003 11:22:29 -0500
    
    

    Since most people are still dial-up, the odds of someone tapping into
    their phone line with the intent to steal their POP3 passwords are not
    very good...it's a point-to-point connection.

    Same goes for DSL connectivity. That is generally a point-to-point
    connection, at least as far as I have seen.

    Since you have to be physically on the subnet to sniff it and start packet
    capturing (in a wired world, at least), that minimizes a threat.

    Broadband like a cable modem, on the other hand, is indeed wide open. Why
    it's not such a big problem, I don't know. Perhaps the miscreants are
    having more fun examining unprotected local shares on windows boxes, and
    just stealing the Outlook PST files directly.

    "Zachary Mutrux" <zmutrux@compumentor.org>
    10/17/2003 06:40 PM

    To
    "Security-Basics" <security-basics@securityfocus.com>
    cc

    Subject
    POP3 passwords

    Why has it not been a bigger problem that POP3 passwords are unencrypted
    when sent over the public Internet? Seems like they would be pretty easy
    for
    a miscreant to steal.

    zm

    --
    Zac Mutrux
    Technology Consultant
    CompuMentor
    415-633-9437
    ---------------------------------------------------------------------------
    FREE Whitepaper: Better Management for Network Security
    Looking for a better way to manage your IP security?
    Learn how Solsoft can help you:
    - Ensure robust IP security through policy-based management
    - Make firewall, VPN, and NAT rules interoperable across heterogeneous
    networks
    - Quickly respond to network events from a central console
    Download our FREE whitepaper at:
    http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
    ----------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    FREE Whitepaper: Better Management for Network Security
    Looking for a better way to manage your IP security?
    Learn how Solsoft can help you:
    - Ensure robust IP security through policy-based management
    - Make firewall, VPN, and NAT rules interoperable across heterogeneous
    networks
    - Quickly respond to network events from a central console
    Download our FREE whitepaper at:
    http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
    ----------------------------------------------------------------------------
    

  • Next message: Jorge Garcia: "problems with ttysnoop"

    Relevant Pages

    • RE: Auditing enabled but Logon Failures not showing up
      ... FREE Whitepaper: Better Management for Network Security ... Ensure robust IP security through policy-based management ...
      (Focus-Microsoft)
    • RE: Auditing enabled but Logon Failures not showing up
      ... FREE Whitepaper: Better Management for Network Security ... Ensure robust IP security through policy-based management ...
      (Focus-Microsoft)
    • Re: Terminal Services Auditing?
      ... Read Special Ops and mount an assault to eradicate network negligence today. ... FREE Whitepaper: Better Management for Network Security ... Ensure robust IP security through policy-based management ...
      (Focus-Microsoft)
    • RE: Alternatives to sftp?
      ... FREE Whitepaper: Better Management for Network Security ... Ensure robust IP security through policy-based management ...
      (Security-Basics)
    • RE: Alternatives to sftp?
      ... FREE Whitepaper: Better Management for Network Security ... Ensure robust IP security through policy-based management ...
      (Security-Basics)