|
Ticket ID: SIXXS #865752 Ticket Status: Invalid PoP: nlams04 - Stipte B.V. (Amsterdam)
Whois shows password ?
![[tn]](/s/countries/tn.gif) Carmen Sandiego on Friday, 28 November 2008 19:19:53
I have read and followed the "Reporting Problems" section on the Contact page and am providing the following details for this report based on the list of items stated there:
Hello,
Thank you for giving me the opportunity to be a member of the IPv6 community.
I have just run my first tunnel through SIXXS today.
I noticed doing a whois on my IPv6 side of the tunnel the presence of a MD5-PW line, and this is how it looks like:
whois 2001:960:2:639::2
some lines removed
auth: MD5-PW $1$1SCjNTfq$Z.rEeCPfidMVpJXVmOJ4J/
the rest of the text removed.
So I wanted to know if this is my password as it is stored on SIXXS servers.
TIA
Fathi Ben Nasr<fathi.engineer@gnet.tn>
Username : FBN2-SIXXS
Tunnel : T18287
POP Id : nlams04
IPv6 Local : 2001:960:2:639::2/64
IPv6 Remote : 2001:960:2:639::1/64
Tunnel Type : ayiya
Adminstate : enabled
Userstate : enabled
State change: invalid
The state of this ticket has been changed to invalid
Whois shows password ?
auth: MD5-PW $1$1SCjNTfq$Z.rEeCPfidMVpJXVmOJ4J/
That is a MD5 password which is attached to the IRT-SIXXS object.
Please when using whois actually read the output, it is structured into objects for a reason.
So I wanted to know if this is my password as it is stored on SIXXS servers.
Of course not.
The only 'leak' that exists at the moment is that TIC is not protected by TLS, thus when contacting a TIC server the heartbeat/AYIYA password is sent in the clear over the link.
|
![[ch]](/s/countries/ch.gif)
on Saturday, 29 November 2008 12:12:30
Posting is only allowed when you are