Register | Login
Views: 19364387
Main | Memberlist | Active users | ACS | Commons | Calendar | Online users
Ranks | FAQ | Color Chart | Photo album | IRC Chat
11-02-05 12:59 PM
2 users currently in General Chat: Ailure, Dark Vampriel | 1 guest
Acmlm's Board - I2 Archive - General Chat - MSN Messenger Exploit Goes Public | |
Pages: 1 2Add to favorites | "RSS" Feed | Next newer thread | Next older thread
User Post
Kasumi-Astra
Administrator
Level: 62

Posts: 1204/1867
EXP: 1971846
For next: 12840

Since: 03-15-04
From: Reading, UK
Uni: Sheffield, UK

Since last post: 1 day
Last activity: 12 hours
Posted on 02-14-05 06:57 PM Link | Quote
Hmmm... This is interesting. About a week ago one of my rl friends contacted me over MSN and was acting strange. Later on in the night, after I was working in Photoshop, I closed down the application to be faced with hundreds of IE windows opening.

It was quite disturbing, seeing as I had a firewall in place. It seemed his sort of style, but I know he's not that good enough to get past a firewall.

The only anomoly is that this happened a week before this news report.


(edited by Kasumi-Astra on 02-14-05 02:57 PM)
Xkeeper
The required libraries have not been defined.
Level: NAN

Posts: -2533/-863
EXP: NAN
For next: 0

Since: 03-15-04

Since last post: 2 hours
Last activity: -753366 sec.
Posted on 02-14-05 10:08 PM Link | Quote
Originally posted by dan
but the vulnerability has been known about since the middle of last year.
That might be why. It seems MS just noticed it, or something
Felix

Nipper Plant
Level: 33

Posts: 407/422
EXP: 208347
For next: 20832

Since: 04-03-04
From: Canada

Since last post: 224 days
Last activity: 6 days
Posted on 02-14-05 11:29 PM Link | Quote
Originally posted by Lezard Valeth
PNG is my favourite format, unless I want to create animated images (MNG still is very unknown) or want to show large image files like desktop wallpapers, this done with JPG.
Although I'm using Miranda IM, I hope that program is somehow safe; it uses its own MSN protocol, but on the other hand these exploits are also affecting other applications, like HH said

Whatever, even without these security issues, MSN is a way-overcrowded messenger for me. Easy camera and voice support might be good, but hence a naked Miranda IM like Firefox:

In the first start up it is "naked", but once you install the plugins (extensions for Firefox), you'll be able to customize it in your needs. No crappy buggy MSN errors, far less RAM usage and started up in less than two seconds



I'm not really an expert on program libraries, but as long as you're not using some sort of plugin designed to display ICQ and/or MSN avatars, I don't see any immediate threat.

But then again, I was actually unaware that image files like .jpg and .png could even contain viruses in the first place, so I'm probably not the best source for such things.

And I totally agree with you concerning Miranda and Firefox and the like. There's something infinitely comforting about choosing what features you want to have precicely if and when you decide you want to have them.
donjames
Newcomer
Level: 4

Posts: 1/4
EXP: 129
For next: 150

Since: 02-14-05

Since last post: 258 days
Last activity: 255 days
Posted on 02-14-05 11:53 PM Link | Quote
hhmmm
Surlent
サーレント
Level: 49

Posts: 768/1077
EXP: 863920
For next: 19963

Since: 03-15-04
From: Tower of Lezard Valeth

Since last post: 16 hours
Last activity: 1 hour
Posted on 02-15-05 01:05 AM Link | Quote
Originally posted by donjames
hhmmm

If you could provide us with some more information, that would be great indeed

That's the way, I think, not only browsers for example.
Like ICQ 5. They may put in ten thousend features, but I never use all features. For speech there is Skype, which is for free and can use everyone with a broadband connection (on smallband it uses up a part of the connection speed), video may be limited to MSN or maybe other messengers, but anyway I doubt all people turn on video chat always

Also I don't like ad-banners when I'm chatting.
But although we're using Firefox and such, we should be careful.
Before Firefox 1.0 PR (yes, I'm talking about preview release) was out, they were already few trojans, using .xpi endings, which affected Mozilla.
But, the developers reacted and added a install software block feature. A whitellist-powered feature which first blocks all attempts to install software first. MS don't react on errors, this is especially annoying, because I paid about 90 Euros for my Windows XP Home license.
So I at least expect some functionality


(edited by Lezard Valeth on 02-14-05 09:10 PM)
HyperLamer
<||bass> and this was the soloution i thought of that was guarinteed to piss off the greatest amount of people

Sesshomaru
Tamaranian

Level: 118

Posts: 3296/8210
EXP: 18171887
For next: 211027

Since: 03-15-04
From: Canada, w00t!
LOL FAD

Since last post: 2 hours
Last activity: 2 hours
Posted on 02-16-05 07:24 AM Link | Quote
Any file type can contain a virus if the program that opens it handles its data badly. JPEG, PNG etc aren't supposed to be able to contain code, but through some trickery of the format it's possible to get these programs to dump parts of the file into the wrong place; then you just need to put code in that part of the file and bam, virus.
Originally posted by donjames
hhmmm

Nice post you got there.
Dylan
Devil Trumpets and Angel Trombones ~
Level: 54

Posts: 1301/1407
EXP: 1181697
For next: 52173

Since: 06-19-04
From: Ottawa, Canada.

Since last post: 1 day
Last activity: 6 hours
Posted on 02-17-05 05:00 AM Link | Quote
Originally posted by donjames
hhmmm

Lmao, thats exactly what I thought when I read the thread title. Then I thought, "boring! I don't want to read this!" and now I have the virus. A friend of mine sent me this link on msn, well at least I thought it was my friend, but it was actually an imposter. Now I have oldschool msn from the 90s and it randomly logs me in and out. Yay!
Pages: 1 2Add to favorites | "RSS" Feed | Next newer thread | Next older thread
Acmlm's Board - I2 Archive - General Chat - MSN Messenger Exploit Goes Public | |


ABII


AcmlmBoard vl.ol (11-01-05)
© 2000-2005 Acmlm, Emuz, et al



Page rendered in 0.020 seconds.