full-disclosure - yahoo mail image verification

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: propolice at gmail.com (Eduardo Tongson)
Subject: yahoo mail image verification

On Mon, 07 Feb 2005 12:18:34 +0100, Thierry Haven
<thierry.haven@...opartners.com> wrote:
> After testing the French Yahoo portal, it appears that this flaw
> actually exists. Let's hope they'll fix it soon. However, the impact of
> a bruteforce attempt is minimal if you have a strong password by default
> ...
> 
> I've submitted this bug to Yahoo for review.
> 

confirmed.
works with login.yahoo.com

-- 
Eduardo Tongson
http://i.keepsilent.net [:] GPG KeyID : 0x6033AC66
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x6033AC66
Key fingerprint : 0A86 79BA 3EC1 4B34 0D65  0E05 F9EC 98A2 6033 AC66