New Worm Starts Munching MSN Users 168
Kosmik writes "It appears that MSN has been struck by a vindictive new worm, according to security company Panda Software. The worm, acting in the vein of movies like the Ring and FearDotCom, delivers a fateful terror message and then proceeds to disable most of your protection software like anti-virus,firewalls and even your Windows control apps (TaskManager, Regedit). It distributes itself to all your MSN contacts by sending a video called 'Fantasma.'"
GAIM (Score:3, Insightful)
My friends often try to send me files or pictures or videos through the MSN network and it doesn't work. They get annoyed and tell me to "just use MSN." I'm told that GAIM is stupid & crappy for not supporting these features.
Really makes you wonder if the people who developed gaim couldn't figure out how to make the videos/pictures stream through the chat box
GAIM also works on a number of other chat networks--as chat clients should. Another thing about chat clients is that they should stick to limited functionality. There are way more secure ways to transfer files. I don't want a profile, I don't want it integrated with my operating system (married to the kernel), I don't want media streaming, I just want to chat.
Don't bloat your software.
Miranda (Score:2, Informative)
http://www.miranda-im.org/ [miranda-im.org]
Re:Miranda (Score:4, Informative)
Re:Miranda (Score:2)
Okay, if you're scratching your head at that one, just see Serenity [wikipedia.org].
Re:GAIM (Score:5, Informative)
Re:GAIM (Score:2)
Re:GAIM (Score:5, Informative)
Re:GAIM (Score:1)
Re:GAIM (Score:3, Insightful)
you obviously under-estimate the difficultly of educating the average computer user.
here's a little proverb in reply "Ignorance can be cured, but stupid is forever."
Re:GAIM (Score:2)
Re:GAIM (Score:2)
You've obviously never tried educating the public.
According to your logic, MS shoud stop poking at Vista and just start some kind of "educating the masses" campaign to try and contain the proliferation of malware. I wish them good luck with that.
Between patching the problem (once) or educating the public (hundreds of thousands of times, if not millions, not to mention often several times with the same boneheaded individual), I know what I'd pick...
Re:GAIM (Score:1)
Trillian (Score:2)
Trillian is another popular choice, although if you want Google Talk/Jabber and plugin functionality you have to shell out a few extra $$$. Even though I have I'm still looking at Miranda... the latest alpha looks nice.
The most annoying thing about this though is that some of the protocols don't support buddy list groups, or at least Trillian doesn't, because if I connect to my accounts from another computer with Trillian or from another OS, my groups pretty much explode. It's very annoying. I don't th
Re:GAIM (Score:1)
Re:GAIM (Score:2, Insightful)
Re:GAIM (Score:3, Informative)
Direct client-to-client connections is fraught with firewall/NAT traversal problems. That said, Jingle and SIP support both require client-to-client RTP connections (NAT discovery is done through STUN), so it's possible direct file transfer will be implemented then.
Re:GAIM (Score:2)
Having a dumb ISP is not an excuse as long as you have a public IPv4 address; googling for "6to4" will tell you what to. And if you're an ISP, slap a radvd on your network, please.
Hell, every transitioned user is a step towards getting rid of IPv4, and that's a noble deed.
Re:GAIM (Score:3, Interesting)
I already have an IPv6 network - have done for years. But you don't actually expect a clueless MSN user who wants to send you a file to have IPv6 do you? Also, if you want to do SIP you have the problem that one of the more major VoIP projects, Asterisk, has no support for IPv6 at all.
Hell, every transitioned user is a step towards gettin
Re:GAIM (Score:3, Informative)
Here is the page on using a WRT and DD-WRT for IPv6 [solosoft.org]
Of course if I wasn't so lazy I would have a completed guide on setting that up without Samba
Re:GAIM (Score:2)
Re:GAIM (Score:2)
My Fedora Core 4 server has a global scope IPv4 address (I have a
Re:GAIM (Score:2, Informative)
First of all, GAIM should try to support the features that the native client supports. It's designed to be a total replacement solution, so intentionally leaving features out is a no-no. However, GAIM is a plugin-based program, so if the dev team wants to keep the focus of the development on the core functionality and leave it up to the community to develop a file transfer plugin, that would be OK too.
Next, the idea of a native client supporting more than
What are you talking about? (Score:5, Insightful)
Lots of people complain that P2P is unsafe because it carries virusses and what not. So how come I have never been infected?
Obvious it is because of my enormous intellect that makes einstein look stupid and think that a 15mb .exe files claiming to be a movie is suspicious.
Yes granted the recent WMF crap showed us that if you use MS software any file extension is under suspiscion and the design choice by MS to hide the extension by default must rank as one of their most stupid one (then again this is ms, they make so many it is hard to determine wich one was their worsed).
But GAIM does not protect you from being stupid. Nothing does. Just that if you went through the trouble of installing GAIM on a Non-MS machine, or if you are on a MS-machine deliberatly disabled MSN and installed GAIM, then you are probably not that stupid.
It ain't GAIM that is keeping you safe, it is your brain. Trust me on this, I been around long enough to know people will do anything to get infected. Just promise them a juicy picture. We have about the same chance of stopping computer infection as we have of stepping Sexually Transmitted Diseases. When Miss Jpeg flirts with you, you don't think of using a condom. (Oh and using a condom isn't enough, deep kissing can do it too. How many of you practising safe sex make sure no fluids whatever are swapped?)
Re:What are you talking about? (Score:2)
It ain't GAIM that is keeping you safe, it is your brain. Trust me on this, I been around long enough to know people will do anything to get infected. Just promise them a juicy picture. We have about the same chance of stopping computer infection as we have of stepping Sexually Transmitted Diseases. When Miss Jpeg flirts with you, you don't think of using a condom. (Oh and using a condom isn't enough, deep kissing can do it too. How many of you practising safe sex make sure no fluids whatever are swapped?)
Re:What are you talking about? (Score:4, Funny)
This is Slashdot, where safe sex means you have a firewall between you and the porn site...
Re:What are you talking about? (Score:2)
Once again, the dancing pigs win - parent is 100% right, according to the article, the vulnerability being exploited here is the user.
Re:What are you talking about? (Score:3, Interesting)
As far as I read it this doesn't have anything to do with "bad security" just "bad users". You have to download the code and execute it.
I strongly disagree. Windows fails to make it clear to most users that this is a program, not a movie. That is a security failing of Windows. By default Windows lets any program, even if it has never run before, do anything it wants to. This is a security failing. By default programs should be limited and users should have to explicitly grant the right to do things like
Re:What are you talking about? (Score:4, Interesting)
Also so that the OS knows what is software and what is data. e.g. if an executable has been disguised as an AVI then the best thing to do is try (and probably fail) to play it as an AVI. As opposed to displaying a file with an icon indicating it is one type of file then when it is selected to be opened looking at whatever is actually in the file to decide how to open it.
Effectivly Windows likes to play "bait and switch" with file types.
Re:What are you talking about? (Score:2)
Interesting point. Is the solution here to lock the association between certain file extensions and the category of software that is permitted to read them? I agree the .exe extension is pretty abusable, given it's general nature -- it's an .exe, so page it in to main memory and pass control to it. But how would you go about building this sort of control into software in general? The .exe file has been wi
Re:What are you talking about? (Score:2)
Interesting point. Is the solution here to lock the association between certain file extensions and the category of software that is permitted to read them?
I don't think so. For example, you might want to read .jpg files in a number of different programs for different purposes. Rather, I think we simply need to restrict anything that runs as an executable or script very granularly. Something like jails, VMs, or zones. Further, simply keep track of what files a program creates and let it continue to modif
Re:What are you talking about? (Score:2)
Re:GAIM (Score:2)
Dead right! (Score:2)
GoogleTalk deserves the same ire - you can't do anything with that except send instant messages - that's not what IM was invented for. Harumph! What would Google know about the Internet, anyway.
When will these people learn (as Microsoft have) that not being allowed to destroy our own machines and everyone else we know and spend days trying to get back to where we were is not a feature - it's clearly a bug. We enjoy
Re:Dead right! (Score:2)
Re:Try again (Score:2)
Re:Try again (Score:2)
Microsoft have continually taken good products and protocols - bloated the life out of them with redundant features that their fanboys cite as examples of their superiority and use as sticks to beat genuinely superier products like Gaim with. The net result, as ever, software that can turn your computer from 0 to zombie in 60 seconds.
I don't like Gaim, but there is no denying that it does the job is said it would, which is the job it should be doing - instant messaging. It is
Re:Try again (Score:2)
Re:Try again (Score:2)
Microsoft is not dealing with a highly skilled or security aware customer base, so they should be more security conscious, not less. However, they are driven more by marketing requirements than security.
GAIM is built secure from the bottom up - MSN is built glitzy from the top down.
It's not good enough to say "well it's the stupid users - let god sort them out" - that way we just leave everyone open to distributed attacks.
Re:Try again (Score:2)
Re:Dead right! (Score:2)
Many people don't actually want that functionality. For such people there is nothing "rubbish" about the functionality being lacking.
Downloading executable code off the web is one thing, but how many people actually need to send it over IM? Refusing to accept executable files that are being sent to you would probably be a good start (at least by default - you could stick an option to allow it in the preferences if y
GAIM is not inherently more secure... (Score:4, Informative)
-Rick
Doesn't make worms less annoying (Score:4, Interesting)
"I got my MSN names from http://www.im-names.com/ [im-names.com] they're free!"
After getting this person to clarify that it was sent automatically. I said "OK, that's spyware." They said "I don't care." They are now blocked.
Gaim and some common sense means I'll never actually get the spyware, but it doesn't mean I won't get annoyed by it. After all, remember chain mail? I used to get chain IMs all the time -- "Send this to 25 friends by midnight and something good will happen!".
Really, the only solution, no matter what your IM client, is to start blocking morons.
Re:Doesn't make worms less annoying (Score:2)
GAIM automatically (or used to) puts something about itself in your profile.
Re:GAIM (Score:5, Insightful)
Re:GAIM (Score:2)
It is neither.
Clearly this is neither - the support wasn't left unimplemented specifically to help the end-user (it was probably more a case of "we don't have time and don't consider it important enough to bother with"), now is it a bug since the functionality was never intend
Re:GAIM (Score:2)
Re:GAIM (Score:2)
Some thoughts spring to mind:
1. Make it impossible to run the file directly from the browser - you force the user to (hopefully) think a little more if executable files have to be saved somewhere and then executed
Re:GAIM (Score:2)
Anyway, GAIM *does* have file transfer for MSN. If it's not working for you then your firewall is probably set up improperly. Webcam/Voice will be implemented soon and they are trying to make MSN file transfer more reliable. An IM app is a great way to transfer files for an average person -- it usually uses SSL and doesn't require setup of a SSH, FTP or HTTP server which is way beyond th
Re:GAIM (Score:2)
Another thing about chat clients is that they should stick to limited functionality. There are way more secure ways to transfer files.
When will people learn? Reducing functionality is not a good way to increase security since it motivates people to bypass your security. If you don't support file transfer, a lot of people won't use your program and thus be vulnerable.
The proper solution is to implement the functionality correctly, either by integrating with an existing, secure solution or by implementin
Argh those damn kids and their newfangled tech (Score:2)
My friends often try to send me files or pictures or videos through the "internet" and it doesn't work. They get annoyed and tell me to "go online." I'm told that snail mail is stupid & crappy for not supporting these features.
Really makes you wonder if the people who developed writing couldn't figure out how to make the videos/pictures stream through the mail box
Re:Argh those damn kids and their newfangled tech (Score:3, Informative)
Having supported a lot of moron users I can say that yes, email attachments are often a very Bad Thing. But mainly in the "when you have a hammer everything looks like a nail" sense. In some cases attachments are a good way of sending someone a file, but the clueless get too used to doing it that way and don't think of the consequences.
An example I saw a few years ago (which is a whole catalogue of cockups):
An estate agent did email-shots to prospective house buy
Re:GAIM (Score:2)
Re:GAIM (Score:2, Funny)
Not even an infinite amount of the worst viruses could stamp out basic human stupidity. Like death and taxes, it is just inevitable...
It's the fear stupid (Score:2)
Payload (Score:5, Funny)
Panda did not provide information about the payload of the BlackAngel.B worm.
I think it's pretty clear what the payload is. Somebody better get a fix out for this quick...Like in the next 2 or 3 days!
Fantasma Vs Fantasma (Score:4, Funny)
A CNN poll taken recently showed that 98.1% of US citizens would rather have the MSN virus on their computer instead of the 1990 film in Spanish.
It's so unfortunate that we haven't invented the technology to "unwatch" films yet.
Well you CAN unwatch it. (Score:2)
Re:Fantasma Vs Fantasma (Score:2)
http://www.imdb.com/title/tt0079714/ [imdb.com]
I'd rather be attacked by one of those chrome balls than watching Ghost again, BTW..
In other news.... (Score:2)
In other news, Hollywood announces the production of Tremors 4: Attack of the Microsoft Munchers.
Re:In other news.... (Score:1)
Re:In other news.... (Score:2)
Re:In other news.... (Score:2)
So what is new already? (Score:2, Insightful)
So, did you pay taxes lately?
Viruses, Taxes (oblig) (Score:3, Funny)
Trillian, and regedit... (Score:4, Insightful)
Many corporations support MSN Messenger only. Given a choice, however, I'm very fond of Trillian Pro 3. I found the license price for Trillian to be quite reasonable, considering its flexibility, stability, and the fact that (so far, fingers crossed) it has not been subject to attacks such as this.
so going to happen (Score:5, Funny)
Remember kids, don't constantly insult the person who fixes your computers.
Re:so going to happen (Score:2)
Place your bets everyone. Starting odds are two-to-one that Kenshin does fix his sister's computer this time. ;) Unfortunately, once you start being someone's computer bitch, they always seem to convince you to come back for more abuse. :(
Just make sure you up the amount of beer you charge for service.
Re:so going to happen (Score:2)
Re:so going to happen (Score:2)
My sister lives in a share house and her windows98 box sat in the living room on an ADSL line for two years. At the end of two years it was so virus ridden that I doubt much of the original microsoft code remained.
Now it runs ubuntu. It is used to run firefox and occasionally open office. It has three or four accounts on it so people can have their own environment. I haven't had to fix it since I put it in 18 mont
Bonus points for character (Score:4, Interesting)
Reminds me of the good old days of "gimme a cookie."
Re:Bonus points for character (Score:2, Insightful)
neither is 'pedantoknob,' you pedantoknob.
Obligitory flame (Score:2)
I do know, however, that I misspelled "address." And I don't regret that in the slightest.
Here's a hint... (Score:5, Funny)
From the article:
Ummmm... here's a hint: if somebody sends you a random URL to an executable, don't run it!
The More You Know
Re:Here's a hint... (Score:2)
Re:Here's a hint... (Score:2, Funny)
Re:Here's a hint... (Score:2)
It was safe(and funny) but you never know what lies within MSFT formatted files. It's all too easy to hide executable code in there. WMF, WMV, WMA, DOC, XLS, all allow that kind of code.
It's why i am glad for ODF. at least that way you can see what's inside.
Do we know it's an executable? (Score:2)
Fururama? (Score:4, Funny)
Anyone read this quickly as 'Futurama'?
Normally I will question the brain of anyone who clicks a link without confirming with the person who sent it that it's not a virus, but all my friends know I love futurama clips.
Good news everyone, I can be socially engineered.
How does it reproduce? (Score:3, Interesting)
Re:How does it reproduce? (Score:2)
To be impacted with the _worm_, users have to actively download the code.
Anyone click on the _worm_ link in the article? What did it do? It probably told you all about worms, which is a bit dull but safe. However, that's how it reproduces.
Re:How does it reproduce? (Score:2)
Re: (Score:2)
this is news ? (Score:3, Insightful)
from Pandas webpage
Countries affected
España 2.42
México 2.15
Perú 0.71
Chile 0.33
there are NO english speaking countries affected and the original site which hosted the file is dead (file removed i looked)
if today is AV fud promotion day you could at least try and scare us with a virus that affects English speaking countries
Correction. (Score:2)
If you accept an unsolicited download, you deserve everything you get. This bug can be protected against with a simple "What is this you're trying to send me?".
Re:Correction. (Score:2)
Re:Correction. (Score:2)
The cover would be blown with the "lol" and "j/k" anyway since I have no 12 year olds on my buddy list... (not that I use MSN anyway)
Shock horror, virus writers target MSN (Score:3, Funny)
The title is misleading. (Score:4, Insightful)
MSN Users... (Score:3, Funny)
Hmmm... tastes like chicken.
GOOD TIMES! (Score:2)
Old News (Score:2)
I mean, come on - a virus/worm/trojan attacking a Microsoft application/"service"??
Isn't this like announcing "water passes through a screen door"?
If you're going to insist on using a collection of security holes held together with a little bit of application code, you've pretty much got to expect this kind of thing.
Re:Old News (Score:2)
I guess you don't want to buy my Polish submarine then?
Such a wasted opportunity (Score:2)
--Rob
Re:Open source basher (Score:2)
Oh. Just in case you're too stupid to realize: I'm calling you a judgemental moron.
Re:Open source basher (Score:2)
Re:Open source basher (Score:2)
-- And no, the vast majority of slashdotters likely couldn't write a line of code if their lives depended on it. Just because you're a programmer doesn
Re:IM clients (Score:2)
Re:IM clients (Score:2)
Re:IM clients (Score:2)
Re:Cornelius Album (Score:2, Funny)