🚀 go-pugleaf

On Wed, 30 Mar 2011 08:02:02 +0100, Steve Kaye
<nos...@giddy-kippers.co.uk> wrote:

>On Wed, 30 Mar 2011 04:23:57 +0000 (UTC), John Gordon
><gor...@panix.com> wrote:
>
>>In <CSxkp.103$sy5.68@newsfe22.iad> Polarhound <polar...@comcast.net> writes:
>>
>>> > I disagree.  All Rift clients are the same, so you only need one piece
>>> > of malware to skim any Rift password.  But there are hundreds of email
>>> > clients -- it would be difficult to have malware which recognizes all
>>> > of them.
>>
>>> You don't have to recognize ALL of them, only the major ones.  Even 
>>> then, the clients themselves really don't matter since it would just 
>>> need to monitor for raw traffic common to all emails.
>>
>>If the malware just reads your email over your shoulder and gets the coin
>>link url at the same time you do, that doesn't seem very threatening.
>>It wouldn't have time do do anything.
>
>I think that the idea is that the malware gets your Rift password and
>waits a while until it also gets your email password.  They then log
>in to your email account, log in to Rift and get, use and delete the
>coin lock email.
>
>I think that it wouldn't be able to get a lot of people.  It wouldn't
>be able to get those that use non-browser email clients, those that
>use obscure webmail clients, those that choose to allow the webmail to
>remember them or those that choose to allow the browser to manage
>their password.
>
>Basically, we're talking hotmail, yahoo, google mail, AOL and only if
>they have to type their password in to log in.

Oh yeah, and anyone with a non-browser based email client who doesn't
use one of the secure email options.  That might cover a lot of people
actually.

steve.kaye
-- 
Jelan, 85 Priest       Clokk,   81 Druid         Belugar, 76 Warrior
Kibbs, 83 Paladin      Jengu,   81 Death Knight  Mingan,  76 Shaman
Miho,  82 Rogue        Jaille,  80 Warlock       Aloola,  65 Mage
[ Ravenholdt-EU (Horde) ]                        Yopp,    64 Hunter