Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Re: [Full-disclosure] pidgin OTR information leakage
Feb 27 2012 07:37PM
Michele Orru (antisnatchor gmail com)
-----BEGIN PGP SIGNED MESSAGE-----
Jann Horn wrote:
> 2012/2/25 Dimitris Glynos <dimitris (at) census-labs (dot) com [email concealed]>:
>> Pidgin transmits OTR (off-the-record) conversations over DBUS in
>> plaintext. This makes it possible for attackers that have gained
>> user-level access on a host, to liste...
[ more ]
Copyright 2010, SecurityFocus