[Pidgin] #11770: Crash when AIM hangs & attempt to disable

Pidgin trac at pidgin.im
Sun May 9 16:03:50 EDT 2010


#11770: Crash when AIM hangs & attempt to disable
---------------------+------------------------------------------------------
 Reporter:  cepheid  |        Owner:  MarkDoliner
     Type:  defect   |       Status:  new        
Milestone:           |    Component:  AIM        
  Version:  2.6.6    |   Resolution:             
 Keywords:           |  
---------------------+------------------------------------------------------

Comment(by MarkDoliner):

 nmftm: I don't think so.  When using clientLogin the password is sent over
 TLS or SSL, which I believe is designed such that rainbow tables are
 ineffective.  When not using clientLogin only a hash is sent, and the hash
 is generated using a random nonce (so the attacker would need a rainbow
 table for each random nonce, which means the rainbow table provides no
 benefit).

-- 
Ticket URL: <http://developer.pidgin.im/ticket/11770#comment:6>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list