Major ICQ security hole (1998)

(opennet.ru)

33 points | by sysoleg 2 days ago

6 comments

  • waltbosz 18 minutes ago

    AOL Instant Messenger had several remote code execution exploits. They worked just by sending an IM to someone. You could also crash their computer remotely, or maybe it would just create their client.

    Also their stored password encryption algorithm was easily reversible.

    • camcil 7 minutes ago

      The AIM days are one for the books. What a time to be alive and interested in computerin'

    • compass_copium 1 hour ago

      >When a password of 9 or more characters is sent, their buffer is over-run, and it allows you to log in.

      Man, computers used to be fun

      • mingus88 1 hour ago

        It really was a fun time. I remember sitting in a coffee shop just sniffing WiFi traffic.

        A friend was a reporter for the local paper and interviewed the mayor. I turned my laptop around and showed my friend the mayors imap password. Just right there floating through the air.

        • nubinetwork 54 minutes ago

          Unix crypt only accepted 8 characters and ignored the rest. If your password was 123456789, it was considered the same as 12345678a.

          • saadn92 1 hour ago

            Yep, now everything is done through agents unfortunately.

          • SillyUsername 2 days ago

            So this is how my low numbered account was stolen back in the day - thanks for sharing.

            • orbital-decay 24 minutes ago

              My UIN was merely 7-digit and when it got hacked the guy just logged in, chatted with my friends about random things, and left. I only found out because they were puzzled by "me" talking weird.

              • aussieguy1234 43 minutes ago

                If it happened to me, my next move would be to steal it back

                • rashkov 1 hour ago

                  Can’t believe I still remember my ICQ id

                  • gersonazgo 1 hour ago

                    I read your comment and realized I also do haha lol lfmao rofl

                • taspeotis 1 hour ago

                  Rewrite it in Rust

                  • Tooooooooooooooooooooooooot! (startup jingle, good mems)

                    • chuckhend 1 hour ago

                      Uh oh!

                      • tehlike 13 minutes ago

                        Incoming file transfer