Author Topic: Protection against malicious account deletition  (Read 2971 times)

citizen

  • Hydlaa Resident
  • *
  • Posts: 132
    • View Profile
Re: Protection against malicious account deletition
« Reply #15 on: June 10, 2008, 05:03:51 pm »

So my question is: not taking into account others accessing my comp, is the data exchange encoded in PS or anyone can catch passwords on the fly?

you would need a packet sniffer and you would need to decode the md5sum password, i dont think this would be too easy but i dont know much about it.

it's not just a simple md5 password that's sent over the wire.  while it would be possible to sniff the exchange, you'd pretty much have to be either right in the path (think compromised router), or have poisoned DNS so that packets get routed to you, and even then you'd also have to decode the password string

Ok, it sounds good. Thanks for answering.