News for hackers. Stuff that matters.
Re:Facebook Chat supports Jabber now by evgen on Wednesday February 10, 2010 @03:16PM (#1115888)
Jabber support for FB Chat is nice, but failing to support SSL/TLS is not really acceptable...
Re:Facebook Chat supports Jabber now by aaronblohowiak on Wednesday February 10, 2010 @03:26PM (#1115914)
When would you use FB chat and care about the privacy of the communication?
Re:Facebook Chat supports Jabber now by evgen on Wednesday February 10, 2010 @04:11PM (#1116032)
When I am using a real Jabber client.
Re:Facebook Chat supports Jabber now by compay on Wednesday February 10, 2010 @03:35PM (#1115940)
At work, probably.
Re:Facebook Chat supports Jabber now by aw3c2 on Wednesday February 10, 2010 @03:59PM (#1116002)
This includes the login I guess...
Re:Facebook Chat supports Jabber now by philfreo on Wednesday February 10, 2010 @05:14PM (#1116206)
can someone confirm that login info is sent in the clear? that's pretty terrible.
Re:Facebook Chat supports Jabber now by kam on Wednesday February 10, 2010 @08:21PM (#1116601)
They claim they're using DIGEST-MD5, so not quite plaintext, but a broken hash algorithm

http://www.facebook.com/help/?faq=16742

http://www.facebook.com/help/?faq=16741

Re:Facebook Chat supports Jabber now by j0 on Wednesday February 10, 2010 @08:20PM (#1116596)
yep. they could have at least supported SASL to have the login info encrypted and then transport the rest of the stream unencrypted, but they did not.
Re:Facebook Chat supports Jabber now by presto10 on Wednesday February 10, 2010 @03:29PM (#1115922)
Where does it say SSL/TLS is not supported?
Re:Facebook Chat supports Jabber now by natrius on Wednesday February 10, 2010 @03:51PM (#1115981)
When you try to connect with "Require SSL/TLS" enabled.
Re:Facebook Chat supports Jabber now by zppx on Wednesday February 10, 2010 @06:31PM (#1116388)
Just check the instructions for iChat it clearly says to uncheck SSL.
Re:Facebook Chat supports Jabber now by rlpb on Wednesday February 10, 2010 @09:52PM (#1116727)
Has the AJAX-based chat built into the web application ever been encrypted?