Hacker News

Major ICQ security hole (1998)

33 points by sysoleg ago | 15 comments

waltbosz |next [-]

AOL Instant Messenger had several remote code execution exploits. They worked just by sending an IM to someone. You could also crash their computer remotely, or maybe it would just create their client.

Also their stored password encryption algorithm was easily reversible.

camcil |root |parent [-]

The AIM days are one for the books. What a time to be alive and interested in computerin'

compass_copium |next |previous [-]

>When a password of 9 or more characters is sent, their buffer is over-run, and it allows you to log in.

Man, computers used to be fun

mingus88 |root |parent |next [-]

It really was a fun time. I remember sitting in a coffee shop just sniffing WiFi traffic.

A friend was a reporter for the local paper and interviewed the mayor. I turned my laptop around and showed my friend the mayors imap password. Just right there floating through the air.

nubinetwork |root |parent |next |previous [-]

Unix crypt only accepted 8 characters and ignored the rest. If your password was 123456789, it was considered the same as 12345678a.

saadn92 |root |parent |previous [-]

Yep, now everything is done through agents unfortunately.

SillyUsername |next |previous [-]

So this is how my low numbered account was stolen back in the day - thanks for sharing.

orbital-decay |root |parent |next [-]

My UIN was merely 7-digit and when it got hacked the guy just logged in, chatted with my friends about random things, and left. I only found out because they were puzzled by "me" talking weird.

486sx33 |root |parent [-]

[dead]

aussieguy1234 |root |parent |next |previous [-]

If it happened to me, my next move would be to steal it back

rashkov |root |parent |previous [-]

Can’t believe I still remember my ICQ id

gersonazgo |root |parent [-]

I read your comment and realized I also do haha lol lfmao rofl

taspeotis |next |previous [-]

Rewrite it in Rust

mannycalavera42 |next |previous [-]

Tooooooooooooooooooooooooot! (startup jingle, good mems)

chuckhend |next |previous [-]

Uh oh!

tehlike |root |parent [-]

Incoming file transfer

|previous [-]