Re: Stop Porn Pop-ups

From: Kevin Davisł (zkevindavisz_at_cfl.rr.com)
Date: 01/02/04


Date: Fri, 02 Jan 2004 06:16:11 GMT

On Thu, 1 Jan 2004 10:53:52 -0700, "Bruce Chambers"
<bchambers@nospamcableone.net> wrote:

> Oh, and be especially wary of people who advise you to do nothing
>more than disable the messenger service. Disabling the messenger
>service, by itself, is a "head in the sand" approach to computer
>security. The real problem is _not_ the messenger service pop-ups;
>they're actually providing a useful, if annoying, service by acting as
>a security alert. The true problem is the unsecured computer, and
>you've been advised to merely turn off the warnings. How is this
>helpful?
>

Oh, and don't forget that the Messenger Service would also provide a
useful service to hackers if it is not patched:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-043.asp

Setup a firewall first, but if you don't need the Messenger Service,
turn it off. If you need it, patch it. You would also be well
advised to spend $50 and buy a home router.

Be especially wary of people who would insist on having you keep the
Messenger Service on as a "helpful feature" and conveniently
forgetting to inform you that it has a very serious vulnerability that
needs to be patched immediately.

And of particular interest is that Microsoft itself and security
experts are seriously reconsidering the role of the Messenger service:

http://www.infoworld.com/article/03/10/28/HNmessengeroff_1.html

http://www.pcworld.com/news/article/0,aid,113321,tk,dn110703X,00.asp

http://news.com.com/2100-7355_3-5095935.html

http://www.cnn.com/2003/TECH/internet/11/07/microsoft.popup.reut/index.html

Here's a link where Microsoft actually outright advises the user to
turn off the Messenger Service:

http://www.microsoft.com/WindowsXP/pro/using/howto/communicate/stopspam.asp

Those who would advise not to turn off the Messenger Service for the
less than trivial unintended side benefit of being a warning is
dispensing advice which contradicts the advice of many real security
professionals.

---------------------------------------
What could possibly go wrong?



Relevant Pages

  • Re: Annoying Messenger Pop_ups
    ... (Disabling the messenger service, as ... Messenger Service of Windows ... service is a "head in the sand" approach to computer security. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Messenger Service
    ... >> What is unwise from a security standpoint is to run any services that ... If you don't need the Messenger Service, ... >> firewall is down is bad. ... >While it is true that firewall plus disabling services is more secure ...
    (microsoft.public.win2000.security)
  • Re: POPUPS
    ... (Merely disabling the messenger ... "putting up with" the security gap represented by these messages is ... Messenger Service Window That Contains an Internet Advertisement ... a security alert. ...
    (microsoft.public.windowsxp.general)
  • Re: HEEELLLPPPP!!!
    ... (Merely disabling the messenger service, ... the security gap represented by these messages is particularly ... Messenger Service of Windows ... a security alert. ...
    (microsoft.public.windowsxp.basics)
  • Re: Pop up stoppers
    ... that still haunts the Internet. ... (Merely disabling the messenger service, ... the security gap represented by these messages is particularly ... Messenger Service of Windows ...
    (microsoft.public.windowsxp.basics)