PC Review


Reply
Thread Tools Rate Thread

THE CORRECT (AND ONLY) WAY TO DEAL WITH MESSENGER SERVICE POP-UPS. DON'T LISTEN TO JK - OR ANYONE ELSE!!

 
 
Fred
Guest
Posts: n/a
 
      30th Mar 2004
Then why is Microsoft turning off Messenger Service by default in XP SP2 and
future releases?
"Cerridwen" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> The *CORRECT* (and *only*) way to deal with these is below: -
>
> Turning off the messenger service is an incredibly
> stupid, idiotic and foolish thing to do. It has no bearing on messenger in
> any way, shape or form. The Messenger Service is what spammers exploit to
> shove porn at you. Read on to learn why disabling it is a bad idea.
>
> If the Messenger service is stopped, messages from the Alerter service
> (notifications from your antivirus software, for example) are not
> transmitted. If the Messenger service is turned off, any services
> that explicitly depend on the Messenger service do not start, and an error
> message is logged in the System event log. For this reason,
> Microsoft strongly recommends that you install a firewall and configure it
> to
> block NetBIOS and RPC traffic instead of turning off the Messenger
> service.
>
> And to think that JK speaks for MS and yet he directly contravenes their
> advice!! DON'T LISTEN TO HIM!!
>
> Do the title bars of these pop-ups read "Messenger Service?"
>
> This particular "sales method" is strikingly similar to the
> "protection" rackets offered to small businesses by organized
> criminals. Yes, it's a scam; no reputable business would need to
> resort to extortion. Particularly since they're trying to sell you a
> type of protection that is already available to you free of charge.
>
> This type of spam has become quite common over the past few
> months, and unintentionally serves as a valid security "alert." It
> demonstrates that you haven't been taking sufficient precautions while
> connected to the Internet. Your data probably hasn't been compromised
> by these specific advertisements, but if you're open to this exploit,
> you may well be open to other threats. Install and use a decent,
> properly configured firewall. (Disabling the messenger service, as
> some people recommend, only hides the symptom, and does nothing to
> secure your machine.) And ignoring or just "putting up with" these
> messages and the problem they represent is particularly foolish.
>
> Messenger Service of Windows
> http://support.microsoft.com/default...B;en-us;168893
>
> Messenger Service Window That Contains an Internet Advertisement
> Appears
> http://support.microsoft.com/?id=330904
>
> Stopping Advertisements with Messenger Service Titles
> http://www.microsoft.com/windowsxp/p...e/stopspam.asp
>
> Blocking Ads, Parasites, and Hijackers with a Hosts File
> http://www.mvps.org/winhelp2002/hosts.htm
>
> Oh, and be especially wary of people who advise you to do nothing
> more than disable the messenger service. Disabling the messenger
> service is a "head in the sand" approach to computer security.
>
> The real problem is not the messenger service pop-ups; they're
> actually providing a useful service by acting as a security alert. The
> true problem is the unsecured computer, and you've been
> advised to merely turn off the warnings. How is this helpful?
>
> Equivalent Scenario 1: Somewhere in a house, a small fire starts,
> and sets off the smoke alarm. You, not immediately seeing any
> fire/smoke, complain about the noise of the smoke detector, and are
> advised to remove the smoke detector's battery and go back to sleep.
>
> Equivalent Scenario 2: You over-exert your shoulder at work or
> play, causing bursitis. After weeks of annoying and sometimes
> excruciating pain whenever you try to reach over your head, you go to
> a doctor and say, while demonstrating the motion, "Doc, it hurts when
> I do this." The doctor, being as helpful as some of your respondents,
> replies, "Well, don't do that."
>
> I think that the people deliberately posting such
> bad advice are hacker-wannabes who have no true interest in helping
> you secure your system, but would rather give you a false sense of
> security while ensuring that your computer is still open to
> exploitation.
>
> Therefore, if Bruce is correct, JK is a hacker. Would you take advice from
> someone whose only interest is damaging your system and compromising your
> online safety?!
>
>
> Don't install NAV - it has a nasty habit of screwing up other things (like
> parts of Office for example).
>
> How JK became a MVP is one of the mysteries of the Universe. I hope that,
> come the next review, he's stripped of his title as he's done nothing
> (that
> I can see) to merit it. Unfortunately, that review is still 6 months away.
> Until then, heed this warning and heed it well - DON'T LISTEN TO JK OR YOU
> WILL END UP REGRETTING IT!
>
>



 
Reply With Quote
 
 
 
 
Cerridwen
Guest
Posts: n/a
 
      30th Mar 2004
Fred wrote:
> Then why is Microsoft turning off Messenger Service by default in XP
> SP2 and future releases?


They aren't. Where on earth did you hear that?!


 
Reply With Quote
 
Joe727
Guest
Posts: n/a
 
      30th Mar 2004
Take your pick of the articles:

http://www.google.com/search?hl=en&l...SENGER+SERVICE

Joe

"Cerridwen" <(E-Mail Removed)> wrote in message
news:c4c20o$tbu$(E-Mail Removed)...
> Fred wrote:
>> Then why is Microsoft turning off Messenger Service by default in XP
>> SP2 and future releases?

>
> They aren't. Where on earth did you hear that?!
>
>



 
Reply With Quote
 
Earl Caravelle II
Guest
Posts: n/a
 
      30th Mar 2004
Late last week, America Online acknowledged it taken the drastic and
unprecedented step of programming its software to silently turn off a
Windows service so that it could stem the tide of spam and security
vulnerabilities facing its subscribers.

The Windows Messenger service, enabled by default, allegorically leaves the
door wide open for pop-up ads to pester Windows XP and 2000 users, while
leaving them at risk of security exploits. Now, Microsoft has weighed in and
says it will turn off the service in Windows XP.


--

"Cerridwen" <(E-Mail Removed)> wrote in message
news:c4c20o$tbu$(E-Mail Removed)...
> Fred wrote:
> > Then why is Microsoft turning off Messenger Service by default in XP
> > SP2 and future releases?

>
> They aren't. Where on earth did you hear that?!
>
>



 
Reply With Quote
 
Fred
Guest
Posts: n/a
 
      30th Mar 2004
I have a copy of RC1 Beta and they did.

Following is a quote fromt he release documentation.

"
What existing functionality is changing in Service Pack 2 for Windows XP?
Alerter and Messenger Services Disabled
Detailed description
In previous versions of Windows, the Messenger service is set to start
automatically and the Alerter service is set to manual start. In Service
Pack 2 for Windows XP, both of these services are set to Disabled. No other
changes are made to these services.

"

"Cerridwen" <(E-Mail Removed)> wrote in message
news:c4c20o$tbu$(E-Mail Removed)...
> Fred wrote:
>> Then why is Microsoft turning off Messenger Service by default in XP
>> SP2 and future releases?

>
> They aren't. Where on earth did you hear that?!
>
>



 
Reply With Quote
 
Fred
Guest
Posts: n/a
 
      30th Mar 2004
I have a copy of RC1 Beta and they did.

Following is a quote fromt he release documentation.

"

What existing functionality is changing in Service Pack 2 for Windows XP?
Alerter and Messenger Services Disabled
Detailed description
In previous versions of Windows, the Messenger service is set to start
automatically and the Alerter service is set to manual start. In Service
Pack 2 for Windows XP, both of these services are set to Disabled. No other
changes are made to these services.

Why is this change important? What threats does it mitigate?
There have been a number of security vulnerabilities discovered in these
services. While the services are started, they allow incoming network
connections and present an attack surface. This elevates their security
risk. Also, these services are used infrequently in current computing
environments. Because of the number of vulnerabilities discovered, the
additional attack surface that the services present, and the lack of service
use, they are now disabled by default.

What works differently or stops working? Are there any dependencies?
Any applications or services that use the Alerter or Messenger services to
communicate with the user will not be successful.

How do I fix these issues?
There are two possible avenues to resolve the issue. The recommended
resolution is to revise the software to use another method to communicate
with the user. This allows you to communicate with the user in a more secure
way, without having to use the Alerter or Messenger services.

The second way is to have the application start the Alerter or Messenger
service before making use of its services. Information on starting services
can be found in online Help and in MSDN.

Do I need to change my code to work with Service Pack 2 for Windows XP?
If your code makes use of the Messenger or Alerter services, you may need to
change your code. For more information, see "How do I fix these issues?"
above.

"

"Cerridwen" <(E-Mail Removed)> wrote in message
news:c4c20o$tbu$(E-Mail Removed)...
> Fred wrote:
>> Then why is Microsoft turning off Messenger Service by default in XP
>> SP2 and future releases?

>
> They aren't. Where on earth did you hear that?!
>
>


"Cerridwen" <(E-Mail Removed)> wrote in message
news:c4c20o$tbu$(E-Mail Removed)...
> Fred wrote:
>> Then why is Microsoft turning off Messenger Service by default in XP
>> SP2 and future releases?

>
> They aren't. Where on earth did you hear that?!
>
>



 
Reply With Quote
 
Jonathan Kay [MVP]
Guest
Posts: n/a
 
      30th Mar 2004
Hi,

Wow. I guess when you're too busy trying to slander others you don't have time to keep up
with the news.
____________________________________________
Jonathan Kay
Microsoft MVP - Windows Messenger/MSN Messenger
Associate Expert
http://www.microsoft.com/windowsxp/expertzone/
Messenger Resources - http://messenger.jonathankay.com

"Cerridwen" <(E-Mail Removed)> wrote in message
news:c4c20o$tbu$(E-Mail Removed)...
> Fred wrote:
>> Then why is Microsoft turning off Messenger Service by default in XP
>> SP2 and future releases?

>
> They aren't. Where on earth did you hear that?!
>
>



 
Reply With Quote
 
Joe727
Guest
Posts: n/a
 
      30th Mar 2004
Amen.

Joe

"Jonathan Kay [MVP]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
>
> Wow. I guess when you're too busy trying to slander others you don't have
> time to keep up with the news.
> ____________________________________________
> Jonathan Kay
> Microsoft MVP - Windows Messenger/MSN Messenger
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone/
> Messenger Resources - http://messenger.jonathankay.com
>
> "Cerridwen" <(E-Mail Removed)> wrote in message
> news:c4c20o$tbu$(E-Mail Removed)...
>> Fred wrote:
>>> Then why is Microsoft turning off Messenger Service by default in XP
>>> SP2 and future releases?

>>
>> They aren't. Where on earth did you hear that?!
>>
>>

>
>



 
Reply With Quote
 
Earl Caravelle II
Guest
Posts: n/a
 
      30th Mar 2004
Well said :-)

--

"Jonathan Kay [MVP]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
>
> Wow. I guess when you're too busy trying to slander others you don't have

time to keep up
> with the news.
> ____________________________________________
> Jonathan Kay
> Microsoft MVP - Windows Messenger/MSN Messenger
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone/
> Messenger Resources - http://messenger.jonathankay.com
>
> "Cerridwen" <(E-Mail Removed)> wrote in message
> news:c4c20o$tbu$(E-Mail Removed)...
> > Fred wrote:
> >> Then why is Microsoft turning off Messenger Service by default in XP
> >> SP2 and future releases?

> >
> > They aren't. Where on earth did you hear that?!
> >
> >

>
>



 
Reply With Quote
 
=?Utf-8?B?dmFlcmlj?=
Guest
Posts: n/a
 
      31st Mar 2004
You have issues.
 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Trust Listen port in the window service hash Microsoft Dot NET Framework 3 23rd Jul 2007 11:51 PM
Using Web Service to listen on certain TCP port? Jonah Olsson Microsoft ASP .NET 1 7th Oct 2004 04:02 PM
How to make the Click event of a Button to deal with an asynchronous remote service Henrik Dahl Microsoft ASP .NET 1 18th May 2004 07:26 AM
Conflict that might deal with Messenger... Misto-Roboto Windows XP Messenger 0 8th Dec 2003 05:00 AM
How can I make Windows Messenger listen to 5060 for responses? Patrick Lam Windows XP Messenger 0 4th Nov 2003 07:52 AM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 01:40 AM.