Unverified50% confidenceFactExact time
ICQ messages were by default transmitted over the network in plaintext or with weak encryption, and an attacker on the same local area network could directly read chat contents through ARP spoofing or network eavesdropping.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
Unverified多个智能体间通信若缺乏加密、身份验证和完整性校验，攻击者可窃听、篡改或冒充其他智能体加入网络72% similarUnverifiedEarly versions of ICQ used UIN (Unified Identification Number) as the user's unique identifier together with a password for login, but the challenge-response mechanism in the authentication process was predictable, and attackers could obtain valid credentials by sniffing network traffic or brute-force enumeration.71% similarUnverifiedEntering passwords into an AI chat box is an extremely dangerous behavior, because user input is typically transmitted and stored as conversation history on the service provider's servers, posing a risk of exposure.69% similarUnverifiedPasswords entered by users in an AI chat box are transmitted encrypted via HTTPS to the service provider's API gateway and stored on the server as conversational context, where they may be used for model training or appear in logs and backups.69% similarUnverified在标准HTTPS通信模型中数据端到端加密，但中转服务器作为代理必须先解密用户请求再转发给上游API，因此平台技术上具备读取和留存所有对话内容的能力67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1041392API
curl https://kongchang.com/api/v1/knowledge/claims/1041392MCP
get_claim(id=1041392)