Forum Home
Press F1
 
Thread ID: 25707 2002-10-10 04:42:00 easy message users loser (538) Press F1
Post ID Timestamp Content User
87713 2002-10-10 04:42:00 hey, does anyone out there use easymessage as an alternative to MSN messenger?
If so, do something....
go to programfiles\easymessage (or whatever path you installed it to and look for an em.dat file. Open this in notepad.
See if you see anything that worries you...
I'll be interested to hear your results

Tim.
loser (538)
87714 2002-10-10 05:52:00 loser, now you've got me wondering :)

what's in it? (I don't use easymessage)

Mike.
Mike (15)
87715 2002-10-10 06:04:00 well, I don't want to ruin the fun of discovering this for anyone else who uses easy message...
so other users, don't read on if you don't want the fun spoiled ;)
It's really a very good program, can communicate to msn, yahoo, ain and icq.
You enter your details (login names and passwords) and you never have to type them in, easymessage remembers it and logs in to all your accounts automatically for you if you've got it configured so.

Well thats all good and well, but in a file called em.dat in your installation directory sits details of all your logins, contacts and FREAKING PASSWORDS. In plain old unencrytped text for me to see, for you to look at if you are on my computer, or for Mr Wannabe-a-cool-hacker to steal...

I've emailed the developer about it, I'll wait to see what he says, and let you all know (if there is even anyone else who uses it...

Tim.
loser (538)
87716 2002-10-10 06:09:00 oops, I spoke too soon...
As of about 4 days ago the latest update apparently adds 128bit encryption to this file...
A good reason to update then if anyone is using it...
loser (538)
87717 2002-10-10 06:15:00 haha well done loser :D keep enjoying your program.

Mike.
Mike (15)
87718 2002-10-10 07:18:00 Thanks for the heads-up loser.

I'll just have install it into my own directory so other users (not that I have any) can't get to them.

I see finally download.com actually have the updated download -- Grrrrr
-=JM=- (16)
87719 2002-10-10 09:02:00 Not a prob...

you might check that it's fixed after you do the update too, mine was still unencrypted, but i renamed it to em.dat.old then set up accounts again and the new em.dat IS encrypted.
Or possibly if you uninstall before you do the update.
loser (538)
87720 2002-10-10 09:19:00 yeah that update seemed to fix it up.

Still only find that the emoticon support is the best part of the program/
-=JM=- (16)
87721 2002-10-10 09:22:00 > Still only find that the emoticon support is the best
> part of the program/

huh? are you saying the emoticons are good and the rest is crap, or the rest is good and the emoticons are crap?
loser (538)
87722 2002-10-10 10:00:00 > > Still only find that the emoticon support is the
> best
> > part of the program/
>
> huh? are you saying the emoticons are good and the
> rest is crap, or the rest is good and the emoticons
> are crap?
>


I like the way when you're chatting to someone on ICQ you get the ICQ emoticons. When chatting to someone on MSN you get the MSN icons.

Other than that aspect I prefer Trillian myself.
-=JM=- (16)
1 2