Unverified50% confidenceFactExact time
Early versions of ICQ used UIN (Unified Identification Number) as the user's unique identifier together with a password for login, but the challenge-response mechanism in the authentication process was predictable, and attackers could obtain valid credentials by sniffing network traffic or brute-force enumeration.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIn adversarial tests, regardless of whether an attacker modifies log content, re-signs with an intruder's key, or deletes a step, AgentLog-MCP's cryptographic verification is able to detect the anomaly.72% similarUnverifiedICQ messages were by default transmitted over the network in plaintext or with weak encryption, and an attacker on the same local area network could directly read chat contents through ARP spoofing or network eavesdropping.71% similarUnverifiedA token in an authentication system is a credential that proves a user's identity; once stolen, an attacker can impersonate a legitimate user to access services.71% similarUnverifiedSecurity configuration review of agent-generated IaC results—such as IAM least-privilege permissions and network isolation policies—still requires human oversight.68% similarUnverifiedWhether a password guessing attack succeeds depends on whether the target system has imposed restrictions on login frequency, such as CAPTCHAs, IP banning, and account lockout.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1041390API
curl https://kongchang.com/api/v1/knowledge/claims/1041390MCP
get_claim(id=1041390)