Full Disclosure mailing list archives

Re: Odd Behavior - Windows Messenger Service


From: Jay Sulzberger <jays () panix com>
Date: Wed, 16 Jul 2003 18:34:28 -0400 (EDT)



On Wed, 16 Jul 2003, dos cerveza wrote:

The service starts before you login.
This is normal behaviour.

Perhaps.  But this behavior is not sane.

If this behavior is incorrigible by an ordinary sysadmin using the standard
tools, then that alone disqualifies the OS for serious use, even were the
code free.

oo--JS.


Please read the previous replies you have recieved.


----- Original Message -----
From: "morning_wood" <se_cur_ity () hotmail com>
Date: Wed, 16 Jul 2003 13:11:46 -0700
To: "Martin" <nakal () web de>, <full-disclosure () lists netsys com>
Subject: Re: [Full-disclosure] Odd Behavior - Windows Messenger Service

I can confirm this behavior. This service is enabled on Windows 2000
and XP by default.
I noticed it on my sister's PC after she clicked away 3 advertisement
pop-ups and growling at the PC. I think that the average user does
not know how to disable it.
(And btw: NO, the average MS-Windows user is NOT USING any firewalls.)



more to the point... THERE WAS NO LOGIN PERIOD
this was a fresh install.. waiting at the login prompt.. the pop up was
there before any user ( admin ) settings initialized or login took place.
once again.. this is out of  the box install following all prompts, no
sharing etc. ( only setting computer name and workgroup )reboot.. sit at
login prompt.. login.. pop up was waiting on an uninitialized desktop..
this is my question / issue...   NOT my personal security or lack of
knowlege about basic networking / security.
disabling the service is easy, im reporting on default out of the box
behavior, not how to get rid of it or protect myself.
please all.. re-read my scenario...

donnie


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

--
__________________________________________________________
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup

CareerBuilder.com has over 400,000 jobs. Be smarter about your job search
http://corp.mail.com/careers

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: