Re: Secure Yahoo logins

From: Alan McCaig (alanmccaig@yahoo.co.uk)
Date: 08/28/02 

Date: 28 Aug 2002 14:32:25 -0000
From: Alan McCaig <alanmccaig@yahoo.co.uk>
To: vuln-dev@securityfocus.com
('binary' encoding is not supported, stored as-is) In-Reply-To: <028d01c24e44$201eb060$6501a8c0@uiyetr>

>A couple things - one, yahoo DOES send the password in plain text, you
just
>have to capture it at the right time,

That aint true the last time i was messing with yahoo protocols i learned
alot for them there main ones are called ycht and ymsg and depending on
what protocol you use when logging in it will then depend how the
password is sent. On the ycht protocol your password will be sent in
clear text in the login string i here there is plans for yahoo to stop
using this protocol but ymsg it is alot more secure at first ymsg wasn't
to great and it had problems where people could authenticate there selfs
as any user without there password for a good txt on ymsg9 you should
read http://www.venkydude.com/articles/yahoo.htm yahoo is now at ymsg10
but it ant much changes from 9.
Regards
Alan

Relevant Pages

  • Re: Secure Yahoo logins
    ... Yahoo Messenger protocol do not transmit the password ... Messenger and use the ymsg10 or ymsg9 protocol. ... the architecture of e-mail: an internal e-mail server ...
    (Vuln-Dev)
  • RE: Uninstalling WMP on Vista
    ... I select the HTTP protocol in the list of protocols and choose ... The other issue (Yahoo! ... I tried downloading the newest version of WMP from the Microsoft web site. ... You cannot uninstall WMP from Vista. ...
    (microsoft.public.windowsmedia.player)
  • Re: ipfw pipe show ... help with output is needed, please.
    ... protocol, and showing a tcp port number... ... Everyone is raving about the all-new Yahoo! ...
    (freebsd-net)
  • RE: FIXED -- Protocol Transport Error
    ... wonder if that is something related to having installed Yahoo Jukebox ... specified protocol is not supported...try using a different transport ... Under the Network tab there's a section called "Streaming proxy settings." ...
    (microsoft.public.windowsmedia.player)
  • Re: [fw-wiz] Blocking Yahoo IM
    ... uses to tunnel their proprietary YMSG protocol through SMTP. ... published reverse-engineering covers the obsolete V9 protocol. ... FYI, Yahoo! ... all used for the messenger servers. ...
    (Firewall-Wizards)