Security Basics mailing list archives

Re: Comparison of Yahoo v. MSN Messenger from security standpoint


From: Barrie Dempster <barrie () reboot-robot net>
Date: Sat, 24 Apr 2004 22:59:34 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Murad Talukdar wrote:
| I could be wrong but as Windows has Messenger services integrated
within it
| then wouldn't that make it more damaging if used as a source of attack?
| Even disabling certain messenger services within windows has caused
probs on
| Xp machines in our office as it's all so tied up with other services.
|
| Murad Talukdar

MSN is not equal to the Windows messaging service. The messaging service
is not integrated, it's merely a service running on windows which can be
~ stopped/started and disabled.  You do not need windows messaging
service to run MSN, their functions are entirely different.

As for the comparison between MSN and yahoo, they both have had a
similar security history with yahoo having less known vulnerabilities,
however the protocols are both pretty heavily tested and scrutinized so
I doubt one offers more security over the other, I personally use both
within GAIM (http://gaim.sourceforge.net)

- --
Barrie Dempster

[ gpg --recv-keys --keyserver www.keyserver.net 0x96025FD0 ]

Do something good http://www.lp2p.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFAiuNGsYtTQpYCX9ARAtfFAJ9g4gMDTI8VFxn5f/AziJUz2FRpQwCgsjW7
xJeS7if3LGyaLKuSFghfIWg=
=gQY/
-----END PGP SIGNATURE-----

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------


Current thread: