Re: POP-UPS!!
From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 03/28/04
- Next message: Bob Harris: "Re: Firewall settings?"
- Previous message: Roger Abell: "Re: EFS nightmare"
- In reply to: Kevin Davisł: "Re: POP-UPS!!"
- Next in thread: Bruce Chambers: "Re: POP-UPS!!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 27 Mar 2004 18:48:26 -0500
Kevin Davisł wrote:
<snip>
> I never said it did. In fact if you look, almost all my posts which
> are related to this topic strongly advocates the need for a firewall.
> I was referring strictly to the topic of the Messenger Service.
Let's face it, 99.999999% of the people who come in here complaining of
messenger spam are newbies who need to know that the answer is to get a
firewall. Telling them to disable messenger without saying that the *real*
problem is a computer running naked on the internet is likely going to
confuse them.
>
>> Do you
>> really think home users are going to understand how to turn off
>> unwanted services?
>
> Apparently Microsoft does. Read the following link:
>
>
http://www.microsoft.com/WindowsXP/pro/using/howto/communicate/stopspam.asp
...which quite clearly states: "You should enable the Internet Connection
Firewall and disable the Messenger Service in Windows XP to help protect
your computer from unwanted spam and other potential threats." ..."First,
make sure that your system is protected by an Internet firewall and that
you've followed the steps to Protect Your PC. Disabling the Messenger
Service without using a firewall will prevent the unwanted spam, but will
not protect your computer from intruders."
I have no problem with people disabling messenger if they don't need it on
their computers/networks - only have a problem with people telling others
that the first step is to disable messenger, and not mentioning that the
user *needs* a firewall.
>
> You have a problem with me advising people to turn off the Messenger
> Service then you also have a problem with Microsoft advising the same
> thing. And I quote:
>
> "If you have Windows XP at home or in a small office that you manage
> yourself, you should disable the Messenger Service."
>
> Source: Microsoft (from the above link).
>
> If the Messenger Service is such a great security warning device, why
> is it turned off by default in the next service pack for XP and also
> in 2003 Server?
It's not designed to be a security warning device. It just happens to
function as one. If messenger spam gets through, the computer/network is not
properly secured. Think "canary in a coal mine" if you like that analogy.
And AFAIK, messenger is not going to be disabled in XP SP2 (corrections
welcome) or in a future server OS. Messenger is useful on networks - I make
use of it a lot. A home computer probably doesn't need it. I'm happy MS is
going to make the firewall enabled by default from now on, but that's
something else entirely.
>
>> Show me a link wherein MS says that all that is needed is to shut
>> off this service.
>
> I will not show you such a link because I never claimed one existed.
> Read again what I said. I never, ever indicating that was *all* that
> was needed to secure oneself. I only argue that insisting that
> keeping it on (like you and various others advise) is in contradiction
> with standard security best practices and Microsoft itself. I don't
> know what is wrong with you people. You keep claiming I make this
> statement and I never have.
>
> Now if you actually want to discuss what I actually said, I have
> provided the link above.
>
>
>
> ---------------------------------------
> What could possibly go wrong?
- Next message: Bob Harris: "Re: Firewall settings?"
- Previous message: Roger Abell: "Re: EFS nightmare"
- In reply to: Kevin Davisł: "Re: POP-UPS!!"
- Next in thread: Bruce Chambers: "Re: POP-UPS!!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
