25. August 2007

Digg Accounts at Risk - Passwords transmitted Unencrypted

I am not a hacker or a security expert but today it came to my attention that Digg passwords are not sent over a secure (https) channel . I had a firefox addon Tamper Data installed on my my Firefox browser . I checked to see if i could see the password being sent from my browser to digg while i login to digg. To my surprise i could see the password as well. May be its because digg login doesn’t use https ( secure channel ) protocol. if you want to see it in your case you need to install the Tamper Data addon for firefox then if logged in to digg have to log out and keeping the Tamper Data viewer window open ( Tools>Tamer Data on Firefox ) login to digg account . Then u can see the password of yours being transmitted as an unencrypted text. below is the screenshot of mine.


digg_password.jpg

Related Posts you may like to Read...


  • Gimme Some Stories DIGG !
  • Check your other mail accounts with Gmail
  • Peg After Peg. Peg After Peg..!!
  • What Changes Your Post in The Digg Front Page Can Make to your Blog
  • Office Humour:HR=HIGHLY RISK.

  • 4 Comments

    MyAvatars 0.2

    1. Rajesh From UNITED STATES (UNITED STATES) Wrote Using Internet Explorer Internet Explorer 7.0 on Windows Windows XP on 25. August 2007 at 10:27 am

    Great find bro…

    MyAvatars 0.2

    2. keshuvko From NEPAL (NEPAL) Wrote Using Internet Explorer Internet Explorer 6.0 on Windows Windows XP on 25. August 2007 at 7:56 pm

    I dont know how Diggs work!

    MyAvatars 0.2

    3. Deelip From NEPAL (NEPAL) Wrote Using Mozilla Firefox Mozilla Firefox 2.0.0.6 on Windows Windows XP on 26. August 2007 at 2:19 am

    ISnt that same like keylogger?
    You can even save you IM and email passwords buddy.

    MyAvatars 0.2

    4. aksn1p3r 196.25.255.210 not found Wrote Using Mozilla Firefox Mozilla Firefox 2.0.0.8 on Windows Windows XP on 24. October 2007 at 7:48 pm

    It can probably find a whole lot more than just Digg logins.

    Check this one
    http://aksn1p3r.blogspot.com/2007/07/firefox-asterisk-revealer.html

    Post Comment

    The following tags are permitted: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>