Forgotten passwords

What do you do if you’re migrating a user from Outlook Express to Thunderbird, but they don’t know the password to their ISP mail account?

If you’re me, you might do:

sudo tcpflow -i en1 -c port 110

Fire up Outlook Express on the relevant desktop machine, hit the “Get New Mail” button, and watch the all-important details go flying by in the terminal of my laptop:

tcpflow[4477]: listening on en1 +OK POP3 server ready AUTH -ERR An authentication mechanism MUST be entered CAPA +OK Capability list follows






UIDL . USER foo +OK please send PASS command PASS bar +OK foo is welcome here

Extremely useful, and also a reminder of why you should put as much encryption as possible on your communications. This stuff is just too easy to get at if you don’t. It’s nice to see that Google are setting a good example by enforcing TLS on POP connections to their servers.

This entry was posted in Planet. Bookmark the permalink.