News for hackers. Stuff that matters.

A comment on LeakyX, a vulnerability that Apple and Microsoft have known about for years. Parent comment

Re:LeakyX, a vulnerability that Apple and Microsoft have kno... by mirashii on Saturday September 23, 2017 @03:55PM (#15321398)
I see no evidence of a force downgrade, you can see in the screenshots that he configured SSL off. If you configure SSL off, your credentials go over the wire in plaintext. Surprise surprise.
[ Parent | on HN ]
Re:LeakyX, a vulnerability that Apple and Microsoft have kno... by MichaelGG on Saturday September 23, 2017 @06:15PM (#15322076)
Oh. Well then it's a complete non issue. No wonder MS told them off.
[ Parent | on HN ]
Re:LeakyX, a vulnerability that Apple and Microsoft have kno... by hexadecimated on Saturday September 23, 2017 @09:15PM (#15322711)
I don't see what other response he could have reasonably expected from Microsoft, given that his complaints were about the iOS Exchange connector, and actually had nothing to do with Exchange Server.
[ Parent | on HN ]