full-disclosure - Odd Behavior - Windows Messenger Service

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.NEB.4.55.0307161830470.14118@panix2.panix.com>
From: jays at panix.com (Jay Sulzberger)
Subject: Odd Behavior - Windows Messenger Service


On Wed, 16 Jul 2003, dos cerveza wrote:

> The service starts before you login.
> This is normal behaviour.

Perhaps.  But this behavior is not sane.

If this behavior is incorrigible by an ordinary sysadmin using the standard
tools, then that alone disqualifies the OS for serious use, even were the
code free.

oo--JS.


> Please read the previous replies you have recieved.
>
>
> ----- Original Message -----
> From: "morning_wood" <se_cur_ity@...mail.com>
> Date: Wed, 16 Jul 2003 13:11:46 -0700
> To: "Martin" <nakal@....de>, <full-disclosure@...ts.netsys.com>
> Subject: Re: [Full-Disclosure] Odd Behavior - Windows Messenger Service
>
> > > I can confirm this behavior. This service is enabled on Windows 2000
> > > and XP by default.
> > > I noticed it on my sister's PC after she clicked away 3 advertisement
> > >pop-ups and growling at the PC. I think that the average user does
> > >not know how to disable it.
> > > (And btw: NO, the average MS-Windows user is NOT USING any firewalls.)
> > >
> >
> >
> > more to the point... THERE WAS NO LOGIN PERIOD
> > this was a fresh install.. waiting at the login prompt.. the pop up was
> > there before any user ( admin ) settings initialized or login took place.
> > once again.. this is out of  the box install following all prompts, no
> > sharing etc. ( only setting computer name and workgroup )reboot.. sit at
> > login prompt.. login.. pop up was waiting on an uninitialized desktop..
> > this is my question / issue...   NOT my personal security or lack of
> > knowlege about basic networking / security.
> > disabling the service is easy, im reporting on default out of the box
> > behavior, not how to get rid of it or protect myself.
> > please all.. re-read my scenario...
> >
> > donnie
> >
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
>
> --
> __________________________________________________________
> Sign-up for your own FREE Personalized E-mail at Mail.com
> http://www.mail.com/?sr=signup
>
> CareerBuilder.com has over 400,000 jobs. Be smarter about your job search
> http://corp.mail.com/careers
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>