Hacker News
Major ICQ security hole (1998)
33 points by sysoleg
ago
|
15 comments
waltbosz
|next
[-]
AOL Instant Messenger had several remote code execution exploits. They worked just by sending an IM to someone. You could also crash their computer remotely, or maybe it would just create their client.
Also their stored password encryption algorithm was easily reversible.
compass_copium
|next
|previous
[-]
>When a password of 9 or more characters is sent, their buffer is over-run, and it allows you to log in.
Man, computers used to be fun
mingus88
|root
|parent
|next
[-]
It really was a fun time. I remember sitting in a coffee shop just sniffing WiFi traffic.
A friend was a reporter for the local paper and interviewed the mayor. I turned my laptop around and showed my friend the mayors imap password. Just right there floating through the air.
SillyUsername
|next
|previous
[-]
So this is how my low numbered account was stolen back in the day - thanks for sharing.
orbital-decay
|root
|parent
|next
[-]
My UIN was merely 7-digit and when it got hacked the guy just logged in, chatted with my friends about random things, and left. I only found out because they were puzzled by "me" talking weird.