Personal Loans | Server Load Balancing | Mortgages | Free Credit Report | Clooney will ride again
MSN Messenger Service 1.0 Weak encryption [Archive] - PCMech Forums

PDA

View Full Version : MSN Messenger Service 1.0 Weak encryption


hackercarlos
02-02-2001, 04:56 PM
MSN Messenger Service allows users to save their e-mail password using the "Save this password so I don't have to enter it every time i log on" checkbox when try to logon in the Messenger Service.

The e-mail and the password are stored in the registry key KEY_CURRENT_USER\Identities\9C53B920-A2E8-11D1-A59D-008048B12C6E\Software\Microsoft\MessengerService\

Password MSN Messenger Service

{9C53B920-A2E8-11D1-A59D-008048B12C6E} = this change in all machines

This information can be decrypted using a special program.

To fix this problem do not check the "Save this password so I don't have to enter it every time i log on" checkbox when you logon to the Messenger Service.