when I talk with someone else on the internet with MSN
could my conversation by sniffed ?
or is it all confidential (encrypted) ?

is it possible for a hacker to mislead me in believing
he is a friend without having my friend's password ?

is there protection against dictionary attack
(lengthier login as you gives wrong password) with
passport ?

Re: question about security / confidentiality by Jonathan

Jonathan
Mon May 31 20:53:23 CDT 2004

Greetings Llyod,

It can be sniffed, Messenger does not encrypt conversations.

Not really, no one can "appear" to be someone else (although of course you can change your
display name to whatever you want).

Every system has a "dictionary attack", although I haven't gone looking for one, I assume
there is one for Passport (since it's just a webpage). However, the system does have some
policies in place that prevent people from constantly trying to "guess" your password (for
instance, if you get the password wrong 3 times it will lock out the account for 24 hours or
until the correct password is answered).
____________________________________________
Jonathan Kay
Microsoft MVP - MSN Messenger/Windows Messenger
Associate Expert
http://www.microsoft.com/windowsxp/expertzone/
Messenger Resources - http://messenger.jonathankay.com
All posts unless otherwise specified are (c) 2004 Jonathan Kay.
You *must* contact me for redistribution rights.

"Lloyd Dupont" <net.galador@ld> wrote in message
news:e1BL%23o3REHA.1348@TK2MSFTNGP12.phx.gbl...
> when I talk with someone else on the internet with MSN
> could my conversation by sniffed ?
> or is it all confidential (encrypted) ?
>
> is it possible for a hacker to mislead me in believing
> he is a friend without having my friend's password ?
>
> is there protection against dictionary attack
> (lengthier login as you gives wrong password) with
> passport ?
>
>



Re: question about security / confidentiality by Lloyd

Lloyd
Mon May 31 21:03:46 CDT 2004

Thanks Jonathan for your clear answers.

BTW do you know if there is anyway to encrypt the communication ?
is there any API available to do it myself in C or C# ?
anyway to write a plugin ?

thanks again for your clear and fast answer !

--
Lloyd Dupont, Lead Developer
ihookdb
Get your data mobile
http://www.ihookdb.com
"Jonathan Kay [MVP]" <msnewsreplies@jonathankay.com> wrote in message
news:eceh7s3REHA.3344@TK2MSFTNGP12.phx.gbl...
> Greetings Llyod,
>
> It can be sniffed, Messenger does not encrypt conversations.
>
> Not really, no one can "appear" to be someone else (although of course you
can change your
> display name to whatever you want).
>
> Every system has a "dictionary attack", although I haven't gone looking
for one, I assume
> there is one for Passport (since it's just a webpage). However, the
system does have some
> policies in place that prevent people from constantly trying to "guess"
your password (for
> instance, if you get the password wrong 3 times it will lock out the
account for 24 hours or
> until the correct password is answered).
> ____________________________________________
> Jonathan Kay
> Microsoft MVP - MSN Messenger/Windows Messenger
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone/
> Messenger Resources - http://messenger.jonathankay.com
> All posts unless otherwise specified are (c) 2004 Jonathan Kay.
> You *must* contact me for redistribution rights.
>
> "Lloyd Dupont" <net.galador@ld> wrote in message
> news:e1BL%23o3REHA.1348@TK2MSFTNGP12.phx.gbl...
> > when I talk with someone else on the internet with MSN
> > could my conversation by sniffed ?
> > or is it all confidential (encrypted) ?
> >
> > is it possible for a hacker to mislead me in believing
> > he is a friend without having my friend's password ?
> >
> > is there protection against dictionary attack
> > (lengthier login as you gives wrong password) with
> > passport ?
> >
> >
>
>



Re: question about security / confidentiality by x_ddaann

x_ddaann
Wed Jun 02 06:19:45 CDT 2004

you can use this.

http://www.secway.fr/products/simplite_msn/home.php?PARAM=us,ie