Now your talking about hackers instead of spammers.
There's not really a difference nowadays, since most spam is sent from
pwned servers/PCs.
It is hard to sniff a HTTP session, you have to penetrate your
victim's network enough to be able to do so.
We're talking about a downloadable app. All I have to do is download a
copy of it and either sniff its network traffic, or run it in gdb and
set breakpoints on likely API calls that set up HTTP authentication.
Then I know the URL and password.
(None of this may be likely, but security requires thinking about the
worst possible scenarios.)
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/email@hidden
This email sent to email@hidden
