Gmail
-
Freakaloin
- Posts: 10620
- Joined: Tue May 07, 2002 7:00 am
-
Freakaloin
- Posts: 10620
- Joined: Tue May 07, 2002 7:00 am
sign up for the beta program and you might/will be given the proper signup info. I don't use hotmail, but have my main email addresses hooked upto the passport service but they wouldn't let me use that; you need a hotmail account.booker wrote:someone on digg posted how to change your hotmail to LIVE.
the link to sign up is: http://www1.imagine-msn.com/minisites/m ... cale=en-gb
-
primaltheory
- Posts: 623
- Joined: Wed Dec 28, 2005 4:31 am
Yahoo has an explicit SSL login option, and I think Hotmail encrypts at least the password during login.+JuggerNaut+ wrote:um, yes it does. it means you won't be sniffing my username and password which is the same as your IM client.prince1000 wrote:that doesn't mean a thing+JuggerNaut+ wrote:and don't forget it's the only major web based mail (afaik) that uses SSL. sorry hotmail and yahoo
http://www.google-watch.org/gmail.html
-
+JuggerNaut+
- Posts: 22175
- Joined: Sun Oct 14, 2001 7:00 am
might be an option for yahoo (didn't know this) but no one uses it. passwords are not encrypted with hotmail though since they're easily sniffable.zewulf wrote:Yahoo has an explicit SSL login option, and I think Hotmail encrypts at least the password during login.+JuggerNaut+ wrote:um, yes it does. it means you won't be sniffing my username and password which is the same as your IM client.
-
+JuggerNaut+
- Posts: 22175
- Joined: Sun Oct 14, 2001 7:00 am
Heh...I probably shouldn't have said "it blows." I don't dislike it that much.
Originally, I didn't like it because of the lack of folders. By the time I discovered you can label messages, I already had hundreds of emails to organize.
Now my big problem with it is that it runs javascript. I like to be able to open more than one message at a time. If you turn javascript off, then you have to let the page reload if you want to do something like attach a file or change the subject line.
I wish there was a way to preferencially use the HTML version of Gmail without having to turn off your javascript function.
Originally, I didn't like it because of the lack of folders. By the time I discovered you can label messages, I already had hundreds of emails to organize.
Now my big problem with it is that it runs javascript. I like to be able to open more than one message at a time. If you turn javascript off, then you have to let the page reload if you want to do something like attach a file or change the subject line.
I wish there was a way to preferencially use the HTML version of Gmail without having to turn off your javascript function.
-
Tormentius
- Posts: 4108
- Joined: Sat Dec 14, 2002 8:00 am
-
Tormentius
- Posts: 4108
- Joined: Sat Dec 14, 2002 8:00 am
They're bringing out an entire new edition of it as part of Windows Live which will more closely resemble Exchange's OWA.FragaGeddon wrote:From what I've heard, MS wants to try and ditch their hotmail service.Foo wrote:pop access, inline spell-checker, tagging, massive storage, easy filtering, simple interface.
Hotmail is a piece of shit compared to gmail. Google are getting so big 'cause MS has been caught napping.
I do :icon32: I think Yahoo's standard mode probably works similary to Hotmail's. They probably provide the secure mode just for the paranoids out there+JuggerNaut+ wrote:might be an option for yahoo (didn't know this) but no one uses it.
I know for sure Hotmail encrypts something (using SSL) after you click the Sign In button+JuggerNaut+ wrote: passwords are not encrypted with hotmail though since they're easily sniffable.
-
+JuggerNaut+
- Posts: 22175
- Joined: Sun Oct 14, 2001 7:00 am
interesting that those packets are easily sniffable. obviously i'm only referring to a wireless session.Tormentius wrote:Take a look during login with Hotmail...its SSL. The entire session isn't but authentication is.+JuggerNaut+ wrote:and don't forget it's the only major web based mail (afaik) that uses SSL. sorry hotmail and yahoo
Are you a packet sniffer Juggs? :icon6: Being sniffable and being decipherable are two different things though, and wireless shouldn't make it any different. You can always sniff a packet, but if it's encrypted, it's pretty much useless. I know one major bank whose online banking login on their frontpage is similar to Hotmail's. The reason you don't see the familiar SSL indicators is because they don't make their entire frontpage secure.
-
primaltheory
- Posts: 623
- Joined: Wed Dec 28, 2005 4:31 am
If you sniff the packet going out then you sniff the packet going back, I think you can get the password, besides, why sniff packets with hotmail when it's so easily exploitable anyways? (remember how easy it was to get into another person's account back in the 90s?)zewulf wrote:Are you a packet sniffer Juggs? :icon6: Being sniffable and being decipherable are two different things though, and wireless shouldn't make it any different. You can always sniff a packet, but if it's encrypted, it's pretty much useless. I know one major bank whose online banking login on their frontpage is similar to Hotmail's. The reason you don't see the familiar SSL indicators is because they don't make their entire frontpage secure.
Why not?
[i]Jenny: lol, i'm not changing the whole harddrive directory structure for a mod. Do it proper like other mods please.[/i]
[i]Jenny: lol, i'm not changing the whole harddrive directory structure for a mod. Do it proper like other mods please.[/i]
ffsprince1000 wrote:that doesn't mean a thing+JuggerNaut+ wrote:and don't forget it's the only major web based mail (afaik) that uses SSL. sorry hotmail and yahoo
http://www.google-watch.org/gmail.html
Users browsing this forum: No registered users and 0 guests
-
^misantropia^
- Posts: 4022
- Joined: Sat Mar 12, 2005 6:24 pm
NoScript?werldhed wrote:I wish there was a way to preferencially use the HTML version of Gmail without having to turn off your javascript function.
-
Tormentius
- Posts: 4108
- Joined: Sat Dec 14, 2002 8:00 am
You can't get the password by packet monitoring (either wired or wireless). The intial login to Passport is encrypted via SSL and once the user is authenticated a one-way hash is generated. That hash is used for the remainder of the session rather than sending the password again. There is no way to get a cleartext password by sniffing a Passport login.primaltheory wrote:
If you sniff the packet going out then you sniff the packet going back, I think you can get the password, besides, why sniff packets with hotmail when it's so easily exploitable anyways? (remember how easy it was to get into another person's account back in the 90s?)
MS is pushing Passport as a single-signon service to businesses and the implementation costs are large. That being the case, do you honestly think they are going to have an open authentication scheme on a business-grade product, let alone an email service with 40 million subscribers?
I'm also willing to bet that you can't currently point to a single unpatched vulnerability in Hotmail which can be exploited to gain access to an account.