[Gaim-devel] Re: Gaim 1.2.0 virus or security leak??

[Jim S. <jsa...@sb...>]

Luke Schierer wrote:

>On Thu, Mar 24, 2005 at 11:15:21AM -0600, Jim Sabatke wrote:
>  
>
>>Hi,
>>
>>I just compiled and installed gaim 1.2.0 on my SuSE 9.0 box a few days 
>>ago.  This morning I had a bunch of Yahoo messages from people asking 
>>why I sent them to an Easter card URL that doesn't work.  I never sent 
>>any such thing.
>>
>>This concerns me.  I don't know who to contact as the gaim pages don't 
>>have an email list or forum.
>>
>>Can you help?
>>
>>Thanks,
>>    
>>
>
>How did you install gaim? you compiled it yourself? did your friends 
>get this card url via IM? or email? 
>  
>
I compiled it myself.  The only ./configure switch I used was --prefix.

The card URL was sent via IM and only Yahoo addresses were used that I 
know of.  I had left gaim on overnight as MSN folks like to leave 
messages, which they can't do if it's off.

>Gaim would not be doing this itself as we distribute it, and I do not 
>know of any way for someone to cause gaim to send a message to people. 
>the most likely thing I can think of is that this came from email, or 
>that someone has figured out your Y!M password.
>
>luke
>  
>
I suppose this is possible.  If I'm the only one having this problem, 
then it is more likely.  AFAIK though, if someone had logged into YM, 
then my session would have gone dormant overnight, right?

Thanks,

Jim