On Thu, 11 Apr 2002, Arvind wrote:

> how come, people get the yahoo protocol so easily?
> it was never released as free source, or was it?

The earlier yahoo protocol was pretty much clear text.  Any packet 
sniffer would show you the packets.  After that it was trivial to write 
a library.

The next version used MD5 encryption, but with a fixed salt - that was 
cracked too.

The latest uses MD5 with a challenge/response pair - which is pretty 
much harder to crack.

My scans show that the yahoo client makes a few hundred hits to 
MD5_Update, which makes the probability of cracking it even lower.

-- 
"A power so great, it can only be used for Good or Evil!"
                -- Firesign Theatre, "The Giant Rat of Summatra"



_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to