Re: Is this spoof?

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 04/13/04


Date: Tue, 13 Apr 2004 00:19:16 -0400

Howdy - pardon my jumping in...

http://support.microsoft.com/default.aspx?scid=kb;en-us;330904
says "To resolve this issue, install or turn on a firewall that blocks
inbound NetBIOS and UDP broadcast traffic. The method that you use to
resolve this issue depends on your operating system and how you connect to
the Internet....."

Disabling messenger is dealt with in the "workaround" section, waaaay down
the page.

Trafton wrote:
> It is true enough that this does disable the Alerter software, I
> have, in my experience, found that most people find that in a home
> network environment, this is an unnecessary feature. I should have
> made it more clear in my original message that there are downsides to
> disabling the Messenger service, although Microsoft itself recommends
> that "if you have Windows XP at home or in a small office that you
> manage yourself, you should disable the Messenger Service." The same
> document recommends talking to a network administrator about it
> before disabling the Messenger service, but nowhere does it recommend
> against it even in a corporate environment. It is better to also
> initialize the firewall built into Windows XP, as this does indeed
> indicate poor security; regardless, the installation of a firewall IN
> ADDITION to disabling the Windows Messenger service seems to be
> Microsoft's recommended position on the issue.
>
> Sincerely,
> Benjamin Johnstone-Anderson
> Microsoft "MVP" - Windows Security
> Remove "SPAM" from email address to reply!
> Security Manifest: www.msmvps.com/trafton/
>
> "Bruce Chambers" <bchambers@nospamcableone.net> wrote in message
> news:107mj0nhle6ppcf@corp.supernews.com...
>> Greetings --
>>
>> I realize that you're trying to help, and that such an intent is
>> commendable, but please don't post potentially harmful advice.
>> Frankly, I'd have expected a Security MVP to have known better.
>>
>> Disabling the messenger service, as you advise, is a "head in the
>> sand" approach to computer security that leaves the PC vulnerable to
>> threats such as the W32.Blaster.Worm.
>>
>> The real problem is _not_ the messenger service pop-ups; they're
>> actually providing a useful service by acting as a security alert.
>> The true problem is the unsecured computer, and you're only advice,
>> however well-intended, was to turn off the warnings. How is this
>> helpful?
>>
>> Equivalent Scenario: You over-exert your shoulder at work or
>> play, causing bursitis. After weeks of annoying and sometimes
>> excruciating pain whenever you try to reach over your head, you go
>> to a doctor and say, while demonstrating the motion, "Doc, it hurts
>> when I do this." The doctor, being as helpful as you are, replies,
>> "Well, don't do that."
>>
>> The only true way to secure the PC, short of disconnecting it
>> from the Internet, is to install and *properly* configure a
>> firewall; just installing one and letting it's default settings
>> handle things is no good. Unfortunately, this does require one to
>> learn a little bit more about using a computer than used to be
>> necessary.
>>
>>
>> Bruce Chambers
>>
>> --
>> Help us help you:
>> http://dts-l.org/goodpost.htm
>> http://www.catb.org/~esr/faqs/smart-questions.html
>>
>>
>> You can have peace. Or you can have freedom. Don't ever count on
>> having both at once. -- RAH
>>
>>
>> Bruce Chambers
>>
>> --
>> Help us help you:
>> http://dts-l.org/goodpost.htm
>> http://www.catb.org/~esr/faqs/smart-questions.html
>>
>>
>> You can have peace. Or you can have freedom. Don't ever count on
>> having both at once. -- RAH
>>
>>
>> "Trafton" <traftonofjj2SPAM@yahoo.com> wrote in message
>> news:ue1%23YkPIEHA.520@tk2msftngp13.phx.gbl...
>>> Hi Kevin,
>>>
>>> It's definitely a spoof...there are a number of corporations that
>>> use these shady marketing tactics. The best thing to do is disable
>>> Windows Messenger or ignore these.
>>>
>>> Sincerely,
>>> Benjamin Johnstone-Anderson
>>> Microsoft "MVP" - Windows Security
>>> Remove "SPAM" from email address to reply!
>>> Security Manifest: www.msmvps.com/trafton/



Relevant Pages

  • Re: "Messenger Service" Pop Up
    ... Duncan McNutt ... but disabling the messenger service isn't the ... but you ALSO need a firewall - otherwise you've just bandaided ...
    (microsoft.public.security)
  • Re: messenger in services
    ... I have windows xp firewall enabled and Norton Systemworks ... (Merely disabling the ... >Messenger Service Window That Contains an Internet ...
    (microsoft.public.windowsxp.general)
  • Re: Legitimate System Message or SPAM?
    ... look into beefing up my firewall protection. ... > messenger service, as some people recommend, only hides the symptom, ... > ignoring or just "putting up with" the security gap represented by ... Disabling the messenger ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Messenger
    ... Before implemeting the rules into the Firewall ... ... > messenger service, as some people recommend, only hides the symptom, ... > Stopping Advertisements with Messenger Service Titles ... Disabling the messenger ...
    (microsoft.public.security.virus)
  • Re: Spyware Advice
    ... and Sasser Worms that still haunt the Internet. ... > use a decent, properly configured firewall. ... > messenger service, as some people recommend, only hides the symptom, ... Disabling the messenger ...
    (microsoft.public.windowsxp.general)