🚀 go-pugleaf

On Wed, 30 Mar 2011 04:23:57 +0000 (UTC), John Gordon
<gor...@panix.com> wrote:

>In <CSxkp.103$sy5.68@newsfe22.iad> Polarhound <polar...@comcast.net> writes:
>
>> > I disagree.  All Rift clients are the same, so you only need one piece
>> > of malware to skim any Rift password.  But there are hundreds of email
>> > clients -- it would be difficult to have malware which recognizes all
>> > of them.
>
>> You don't have to recognize ALL of them, only the major ones.  Even 
>> then, the clients themselves really don't matter since it would just 
>> need to monitor for raw traffic common to all emails.
>
>If the malware just reads your email over your shoulder and gets the coin
>link url at the same time you do, that doesn't seem very threatening.
>It wouldn't have time do do anything.

I think that the idea is that the malware gets your Rift password and
waits a while until it also gets your email password.  They then log
in to your email account, log in to Rift and get, use and delete the
coin lock email.

I think that it wouldn't be able to get a lot of people.  It wouldn't
be able to get those that use non-browser email clients, those that
use obscure webmail clients, those that choose to allow the webmail to
remember them or those that choose to allow the browser to manage
their password.

Basically, we're talking hotmail, yahoo, google mail, AOL and only if
they have to type their password in to log in.

steve.kaye
-- 
Jelan, 85 Priest       Clokk,   81 Druid         Belugar, 76 Warrior
Kibbs, 83 Paladin      Jengu,   81 Death Knight  Mingan,  76 Shaman
Miho,  82 Rogue        Jaille,  80 Warlock       Aloola,  65 Mage
[ Ravenholdt-EU (Horde) ]                        Yopp,    64 Hunter