<- Back
Comments (53)
- SXXCVE-2012-2122: A Tragically Comedic Security Flaw in MySQLhttps://www.rapid7.com/blog/post/2012/06/11/cve-2012-2122-a-...> ... Since the authentication protocol generates a different hash each time this comparison is done, there is a 1 in 256 chance that ANY password would be accepted for authentication. ...
- compass_copium>When a password of 9 or more characters is sent, their buffer is over-run, and it allows you to log in.Man, computers used to be fun
- egeozcanThis made me realize that I still remember my ICQ UIN! I cannot remember what I've had for lunch yesterday, btw.
- waltboszAOL Instant Messenger had several remote code execution exploits. They worked just by sending an IM to someone. You could also crash their computer remotely, or maybe it would just create their client.Also their stored password encryption algorithm was easily reversible.
- SillyUsernameSo this is how my low numbered account was stolen back in the day - thanks for sharing.
- runepICQ sent messages directly between peers when both were online and unfirewalled and there were no verification that you were who you claimed. I had a lot of (friendly) fun spoofing other ICQ numbers. Or sending someone a message from themselves.
- Subdivide8452Am I correctly understanding that ICQ had an 8 character limit on the passwords?
- PedroBatistaAI is really a dangerous technology, look how fast it’s discovering major security flaws!
- mannycalavera42Tooooooooooooooooooooooooot! (startup jingle, good mems)
- urvader> Mirabilis / AOL really needs to fix this problem.
- taspeotisRewrite it in Rust
- chuckhendUh oh!
- myth_drannonI think I discovered that by mistake using Miranda client in 2002!The tech scene of the 90s in Israel was crazy. Mirablis was hiring high school students to do QA.
- SG-i still remember my ICQ number all these years later.
- anonundefined
- leoli13579[dead]