Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
[Full-disclosure] Yahoo Messenger privacy vulnerability in Yahoo 360
From: n3td3v (xploitablegmail.com)
Date: Sun Jun 26 2005 - 18:01:41 CDT
Hello security community,
Can someone confirm that the following is true?...
Just when users of Yahoo Messenger had got a custom to being stealth
from friends on Yahoo Messenger and Yahoo Profiles. Yahoo 360 appeared
late March 2005, and currently takes your privacy away.
Currently Yahoo 360 is not in sync with Yahoo Messenger stealth
settings, therefore the user appears online at Yahoo 360.
The vulnerability can be exploited and written into a hackers IM
software, to have real-time online status, quickly and easily, of any
devious users who choose to hide using Yahoo Messenger's stealth
Whats more is, if a user selects *Don't display my status on Yahoo
sites* via Yahoo Messenger/Yahoo Profiles/Yahoo Members Directory, the
true and not false online status is still displayed on Yahoo 360.
Don't use stealth settings and select "Invisible to Everyone" on your
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/