Join or sign in Register for your free TechRepublic membership or if you are already a member, sign in using your preferred method below. Use Your Email Use FacebookUse Linkedin

Yahoo password

Locked

I have discovered that MS proxy log file
is showing yahoo password for all the users
on the LAN when they use yahoo massenger to login to thire mail box.
I want to know is this a security hole on yahoo or they are sending the password in clear text format ?

Topic

Yahoo password

In reply to Yahoo password

Yes this is a security hole
Yes they are sending the password clear text

Yahoo password

In reply to Yahoo password

But why they don?t realize this issue
Since it is common why they don?t avoided this hole.

Yahoo password

In reply to Yahoo password

Yahoo is aware of this and they don’t care. Here are some snippits from their web site, talking about Security and Yahoo Messenger:
“Yahoo! Messenger is intended to allow users to engage in private conversations. However, this does not guarantee that your conversation will never be available to others…”
“If your organization uses a firewall, your administrator may have the ability to review any of your network traffic and content, including any instant messages you send. If you are concerned about this, you should discuss this with the organization giving you Internet access”
“In addition, it is possible, although rare, for someone to capture your Messenger login name and password information as it passes through your organization’s network or as it crosses the Internet. Please remember to “Sign Out” at the end of your session. You should also periodically change your Yahoo! password and check your Yahoo! account information, to make sure it is accurate, and that no one has altered your account.”

So, yes, Messenger is not secure.
Here is the URL with this document:
http://help.yahoo.com/help/us/mesg/mesg-07.html
(please remove any spaces)

Yahoo password

In reply to Yahoo password

Poster rated this answer

Yahoo password

In reply to Yahoo password

This question was closed by the author

[Author]

Replies