Quote:
quote:Originally posted by xgames
some told me that there are bots, created by hackers, that can check to see if a buddy is online without being logged into yahoo, and if the buddy,has more than one name, it will show all of them except if the names the buddy uses are logged on seperatly. Could just be rumor though.
|
- You need to be logged onto your friends list on Yahoo! Messenger network to know the online status, if the user is masking online status from the public. If a user hasn't choosn to mask his or hers online status, then its just a case of checking the online status of any ID, by for example, viewing the users profile.
- Yeah, the second part of what you are saying is true. Methods are available, which I won't disclose here, which can allow a malicious user to know all ID's on a parented account, and therefore, you can also check online status of these, by checking online status, by for example, viewing a users profile.
I take it you know about unsakred's Buddyspy? That program has the obvious flaws in privacy and security for Yahoo! consumers, that means Yahoo! Messenger team will need to build a brand new protocol in 2005 to sort all the concerns out, the program highlights. The program "Buddyspy", though has also highlighted less apparent flaws in the messenger protocol ver 12, which can't be seen by the untrained eye, but if you have an eye for this stuff, like I do, you'll soon get see more than meets the eye, where a hacker would be able to further exploit unsakred's proof of concept for online status checking. Basically, unsakred's program has drawn the attention to other pitfalls, not fully featured on unsakred's program, but yeah.