Security Flaw In Yahoo Mail Exposes Plaintext Authentication Info

**TNT Bot** · Sep 27, 2008, 02:26pm

holdenkarau writes "Yahoo!'s acquisition of open source mail client Zimbra has apparently brought some baggage to the mail team. The new Yahoo! desktop program transmits the authentication information in plain text. The flaw was discovered during a Yahoo 'hacku' Day at the University of Waterloo (the only Canadian school part of the trip). Compared to the recent news about Gmail exposing the names associated with accounts, this seems downright scary. So, if you have friends or relatives who might have installed Yahoo! desktop and value their e-mail accounts, now would be a good time to get them to change the password and switch back to the web interface."

Sep 27, 2008, 02:26pm	#1 (permalink) Security Flaw In Yahoo Mail Exposes Plaintext Authentication Info
TNT Bot Elite Member Posts: 4,997 Karma:	holdenkarau writes "Yahoo!'s acquisition of open source mail client Zimbra has apparently brought some baggage to the mail team. The new Yahoo! desktop program transmits the authentication information in plain text. The flaw was discovered during a Yahoo 'hacku' Day at the University of Waterloo (the only Canadian school part of the trip). Compared to the recent news about Gmail exposing the names associated with accounts, this seems downright scary. So, if you have friends or relatives who might have installed Yahoo! desktop and value their e-mail accounts, now would be a good time to get them to change the password and switch back to the web interface." Read more of this story at Slashdot. More...

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search