Re: Ace Password Sniffer : How does it work ?

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 08/07/04 

Date: Sat, 7 Aug 2004 09:37:04 +0200

I don't know how Yahoo works. MD5 is usually used to store information in
secure manner. If MD5 would be used to transfer information then you would
probably need some plug-in in your PC. Again I am just guessing here...

Https (SSL-TLS) in most widely used way to transfer data back and forth.
This can also guaranty that the server on the other side is really the one
you want (server authentication).

Mike

"*Vanguard*" <do-not-email@reply-to-group> wrote in message
news:OhGlBzDfEHA.3632@TK2MSFTNGP11.phx.gbl...
> "Miha Pihler" <mihap-news@atlantis.si>
> wrote in news:%23hToEO7eEHA.3556@TK2MSFTNGP12.phx.gbl:
> > If you use basic authentication and use http (not https) then
> > passwords are transferred using Base64 encoding (not encryption).
> > There are many tools that will help you decode Base64 coded password
> > http://makcoder.sourceforge.net/demo/base64.php or even use Windows
> > Commander...
> >
> > If web server uses https then it is not so easy to sniff the
> > passwords.
>
> Isn't MD5 also available when using HTTP (to hash the username and
> password)? I use YahooPOPs to access my freebie Yahoo Mail account and
> have it use MD5 to secure the username and password.
>
> --
> __________________________________________________
> *** Post replies to newsgroup. Share with others.
> (E-mail: domain = ".com", add "=NEWS=" to Subject)
> __________________________________________________
>

Quantcast