Major ICQ security hole (1998)

>When a password of 9 or more characters is sent, their buffer is over-run, and it allows you to log in.

Man, computers used to be fun

So this is how my low numbered account was stolen back in the day - thanks for sharing.

AOL Instant Messenger had several remote code execution exploits. They worked just by sending an IM to someone. You could also crash their computer remotely, or maybe it would just create their client.

Also their stored password encryption algorithm was easily reversible.

Tooooooooooooooooooooooooot! (startup jingle, good mems)

Rewrite it in Rust

Uh oh!