SixXS::Sunset 2017-06-06

Ticket ID: SIXXS #865752
Ticket Status: Invalid

PoP: nlams04 - Stipte B.V. (Amsterdam)

Whois shows password ?
[tn] Carmen Sandiego on Friday, 28 November 2008 19:19:53
I have read and followed the "Reporting Problems" section on the Contact page and am providing the following details for this report based on the list of items stated there: Hello, Thank you for giving me the opportunity to be a member of the IPv6 community. I have just run my first tunnel through SIXXS today. I noticed doing a whois on my IPv6 side of the tunnel the presence of a MD5-PW line, and this is how it looks like: whois 2001:960:2:639::2 some lines removed auth: MD5-PW $1$1SCjNTfq$Z.rEeCPfidMVpJXVmOJ4J/ the rest of the text removed. So I wanted to know if this is my password as it is stored on SIXXS servers. TIA Fathi Ben Nasr<fathi.engineer@gnet.tn> Username : FBN2-SIXXS Tunnel : T18287 POP Id : nlams04 IPv6 Local : 2001:960:2:639::2/64 IPv6 Remote : 2001:960:2:639::1/64 Tunnel Type : ayiya Adminstate : enabled Userstate : enabled
State change: invalid Locked
[ch] Jeroen Massar SixXS Staff on Saturday, 29 November 2008 12:12:30
Message is Locked
The state of this ticket has been changed to invalid
Whois shows password ?
[ch] Jeroen Massar SixXS Staff on Saturday, 29 November 2008 12:14:36
auth: MD5-PW $1$1SCjNTfq$Z.rEeCPfidMVpJXVmOJ4J/
That is a MD5 password which is attached to the IRT-SIXXS object. Please when using whois actually read the output, it is structured into objects for a reason.
So I wanted to know if this is my password as it is stored on SIXXS servers.
Of course not. The only 'leak' that exists at the moment is that TIC is not protected by TLS, thus when contacting a TIC server the heartbeat/AYIYA password is sent in the clear over the link.

Please note Posting is only allowed when you are logged in.

Static Sunset Edition of SixXS
©2001-2017 SixXS - IPv6 Deployment & Tunnel Broker