🚀 go-pugleaf

In article <lbdo16lm1jrk0a7ode5n08i7osqd7lpt4d@4ax.com>, John Navas <jncl1@navasgroup.com> wrote:

>>That's not good but if folks are using cleartext passwords
>>over a wireless connection, they really shouldn't have a
>>"reasonable expectation of privacy".
>
>I respectfully disagree -- the problem is the fundamentally flawed POP3
>protocol that many (most?) ISPs still use -- it shouldn't take a
>computer science degree to use basic Internet services.  Shame on us.

POP3 is certainly an issue but you can't hang that one on Google.

It would be interesting to know the distribution of the 
captured passwords, by protocol.

I'm guessing that they caught more HTTP Basic Authentication
passwords than POP3 since most of the inexperienced users
(that I know) use webmail versus POP3/SMTP.

At least those are "encrypted" with Base64 ;-)

-- 
|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
| Malcolm Hoar           "The more I practice, the luckier I get". |
| malch@malch.com                                     Gary Player. |
| http://www.malch.com/               Shpx gur PQN.                |
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~