[Pidgin] #11770: Crash when AIM hangs & attempt to disable
Pidgin
trac at pidgin.im
Sun May 9 16:03:50 EDT 2010
#11770: Crash when AIM hangs & attempt to disable
---------------------+------------------------------------------------------
Reporter: cepheid | Owner: MarkDoliner
Type: defect | Status: new
Milestone: | Component: AIM
Version: 2.6.6 | Resolution:
Keywords: |
---------------------+------------------------------------------------------
Comment(by MarkDoliner):
nmftm: I don't think so. When using clientLogin the password is sent over
TLS or SSL, which I believe is designed such that rainbow tables are
ineffective. When not using clientLogin only a hash is sent, and the hash
is generated using a random nonce (so the attacker would need a rainbow
table for each random nonce, which means the rainbow table provides no
benefit).
--
Ticket URL: <http://developer.pidgin.im/ticket/11770#comment:6>
Pidgin <http://pidgin.im>
Pidgin
More information about the Tracker
mailing list