Re: POP-UPS!!

From: Kevin Davisł (zkevindavisz_at_cfl.rr.com)
Date: 03/27/04 

Date: Sat, 27 Mar 2004 03:44:25 GMT

On Fri, 26 Mar 2004 09:01:30 -0500, "Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote:

>Kevin Davisł wrote:
>> On Wed, 24 Mar 2004 21:04:36 -0500, "Lanwench [MVP - Exchange]"
>> <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote:
>>
>>> consider the messages a useful warning that you have no
>>> protection from the Internet.
>>
>> This goes against the advice of the vast majority of security
>> professionals. The well known defense in depth strategy promoted by
>> almost all respected security professionals includes turning off all
>> unneeded services by default as one of it's major points.
>
>That doesn't negate the need for a firewall. That's the first step.

I never said it did. In fact if you look, almost all my posts which
are related to this topic strongly advocates the need for a firewall.
I was referring strictly to the topic of the Messenger Service.

>Do you
>really think home users are going to understand how to turn off unwanted
>services?

Apparently Microsoft does. Read the following link:

http://www.microsoft.com/WindowsXP/pro/using/howto/communicate/stopspam.asp

You have a problem with me advising people to turn off the Messenger
Service then you also have a problem with Microsoft advising the same
thing. And I quote:

"If you have Windows XP at home or in a small office that you manage
yourself, you should disable the Messenger Service."

Source: Microsoft (from the above link).

If the Messenger Service is such a great security warning device, why
is it turned off by default in the next service pack for XP and also
in 2003 Server?

>Show me a link wherein MS says that all that is needed is to shut off this
>service.

I will not show you such a link because I never claimed one existed.
Read again what I said. I never, ever indicating that was *all* that
was needed to secure oneself. I only argue that insisting that
keeping it on (like you and various others advise) is in contradiction
with standard security best practices and Microsoft itself. I don't
know what is wrong with you people. You keep claiming I make this
statement and I never have.

Now if you actually want to discuss what I actually said, I have
provided the link above.

---------------------------------------
What could possibly go wrong?

Relevant Pages

  • Re: contacting Microsot
    ... sell you patches and information that Microsoft already provides, ... the security gap represented by these messages is particularly ... Messenger Service of Windows ... > some website for updates or patches. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Popups
    ... Microsoft sent, you've been installing viruses. ... rely upon this PC for your business needs, ... something about computer security. ... Messenger Service Window That Contains an Internet Advertisement ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How do I get rid of these porn pop ups?!!!
    ... recently swept cross the Internet. ... "putting up with" the security gap represented by these messages is ... Messenger Service Window That Contains an Internet Advertisement ... > Since the "Microsoft Support" will not accept my Windows ...
    (microsoft.public.security.virus)
  • Re: Microsoft Messenger Service Bulletin
    ... are available free of cost from Microsoft. ... the security gap represented by these messages is particularly ... Messenger Service of Windows ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Fake Microsoft message (?)
    ... the security gap represented by these messages is particularly ... Messenger Service of Windows ... HOW TO Enable or Disable Internet Connection Firewall in Windows XP ... >that Microsoft had detected tracking software that had ...
    (microsoft.public.windowsxp.security_admin)