Shoutbox

I saw a program advertisement that being said, it make it possible to read Plus!'s encrypted log files without any need of a password? I just wonder if it is possible or not?

Well, if something could read it, then it wouldnt be encrypted would it .

Link us to this program please .. but as Sam said, if it could be read without a password then there's no point to having a password

sure, you can open the log in pretty much any text editor without the password!

reading the log without the password on the other hand, is virtually impossible.

w00t! 600 posts!

http://www.msxlabs.org/forum/messenger-plus/6582-...oglari-okuyun.html

From the link you can access the forum page which this program is being advertised. However it sounds strange to me also. I saw it on that forum and people who tried it seem disappointed. All of them say that it doesn't work   You had better try it too. Or even don't try.

well if the program tries to hack the password brute force it "can" read encrypted logfiles...
note: it can if the password is really short or it has like 1000 years to crack it...

The assumption is that the encryption is secure and that is not possible.

That said, the source code of Patchou's implementation is unpublished and hasn't been extensively reviewed by others, unlike Open Source cryptographic software.  Implementation mistakes in cryptography are easy to make (e.g. predictable sources of entropy) and can greatly weaken an otherwise strong algorithm.   If present and correctly exploited, small oversights often reduce the time required for a successful brute force attack from hundreds of years it should take in theory, to hours or minutes in practice.

If any such weakness (or intentional backdoor) exists in the log encryption, it is presently unknown.

I wasn't able to find any claims that this software even tries to decrypt MsgPlus chat logs. In fact, it seems to have nothing to do with MsgPlus at all.

"View Yahoo and MSN chat logs without logging in to Yahoo or MSN."

http://www.fakewebcam.com/demoMYMA.asp
http://www.softpedia.com/get/Security/Decrypting-...coder-Viewer.shtml

You are definitely right. I will report that post on that forum and make admins delete that post. Sorry for taking your time with such a silly thing.

Adeptus: you are right about you say for encryption in general. That's also why I didn't create the aloruthm myself. I'm using the latest stuff available in XP and above which is AES. If somebody can crack this down, I can assure you your Messenger Plus! logs will be the least of your problems .