News for hackers. Stuff that matters.

A comment on Facebook Chat supports Jabber now. Parent comment

Re:Facebook Chat supports Jabber now by philfreo on Wednesday February 10, 2010 @05:14PM (#1116206)
can someone confirm that login info is sent in the clear? that's pretty terrible.
[ Parent | on HN ]
Re:Facebook Chat supports Jabber now by kam on Wednesday February 10, 2010 @08:21PM (#1116601)
They claim they're using DIGEST-MD5, so not quite plaintext, but a broken hash algorithm

http://www.facebook.com/help/?faq=16742

http://www.facebook.com/help/?faq=16741

[ Parent | on HN ]
Re:Facebook Chat supports Jabber now by j0 on Wednesday February 10, 2010 @08:20PM (#1116596)
yep. they could have at least supported SASL to have the login info encrypted and then transport the rest of the stream unencrypted, but they did not.
[ Parent | on HN ]