Major ICQ security hole (1998)

(opennet.ru)

29 points | by sysoleg 2 days ago

6 comments

  • compass_copium 57 minutes ago
    >When a password of 9 or more characters is sent, their buffer is over-run, and it allows you to log in.

    Man, computers used to be fun

    • mingus88 47 minutes ago
      It really was a fun time. I remember sitting in a coffee shop just sniffing WiFi traffic.

      A friend was a reporter for the local paper and interviewed the mayor. I turned my laptop around and showed my friend the mayors imap password. Just right there floating through the air.

    • nubinetwork 30 minutes ago
      Unix crypt only accepted 8 characters and ignored the rest. If your password was 123456789, it was considered the same as 12345678a.
    • saadn92 42 minutes ago
      Yep, now everything is done through agents unfortunately.
  • SillyUsername 2 days ago
    So this is how my low numbered account was stolen back in the day - thanks for sharing.
    • aussieguy1234 19 minutes ago
      If it happened to me, my next move would be to steal it back
    • rashkov 1 hour ago
      Can’t believe I still remember my ICQ id
      • gersonazgo 38 minutes ago
        I read your comment and realized I also do haha lol lfmao rofl
  • taspeotis 1 hour ago
    Rewrite it in Rust
  • mannycalavera42 58 minutes ago
    Tooooooooooooooooooooooooot! (startup jingle, good mems)
  • chuckhend 51 minutes ago
    Uh oh!