Opened 12 years ago

Closed 12 years ago

Last modified 12 years ago

#2066 closed defect (fixed)

Getting password incorrect with myspaceim plubin

Reported by: mrdenny Owned by: jeff
Milestone: Component: libpurple
Version: 2.0.2 Keywords: msim password error
Cc: pidgin@…

Description

Attempting to login with Pidgin 2.0.2 using msim 0.10. Getting "Protocol error, code 260: The password provided is incorrect". Username and password are correct as they work fine in the actual MySpace? IM client.

CCing Jeff since I can't add this ticket from the MSIM page.

Using Windows Vista RTM (with current patches) for an OS. Please let me know if additional info is needed.

Change History (4)

comment:1 follow-up: Changed 12 years ago by jerrypcjr

Workaround I Discovered = Use all lowercase letters

I also had this problem until I authenticated with my correct password in all "lowercase" letters.

My actual (correct) password contains capital letters, lowercase letters and numbers.

A security administrator myself, this will cause many headaches and opens the door wider for password hacking, if not corrected.

comment:2 in reply to: ↑ 1 Changed 12 years ago by datallah

  • Owner set to jeff

Replying to jerrypcjr:

A security administrator myself, this will cause many headaches and opens the door wider for password hacking, if not corrected.

You do realize that this is a flaw in the server and not in pidgin, right?

comment:3 Changed 12 years ago by jeff

  • Resolution set to fixed
  • Status changed from new to closed

http://forums.miranda-im.org/showthread.php?p=122912 also suggests that passwords should be converted to lowercase before sending. My testing confirms that passwords are case-insensitive - try logging into myspace.com with your password case changed in various ways (each choice of capitalization should work).

Fixed in 083e89a7c9ddc989791c77455c0e7bf498e5c39f (which will make it in 0.12) - with this update, you should now be able to login with uppercase passwords (which are converted to lowercase).

Thanks for the report.

comment:4 Changed 12 years ago by jeff2@…

(In 083e89a7c9ddc989791c77455c0e7bf498e5c39f) Lowercase password before sending it. Closes #2066.

Note: See TracTickets for help on using tickets.
All information, including names and email addresses, entered onto this website or sent to mailing lists affiliated with this website will be public. Do not post confidential information, especially passwords!