The downside to MSN Messenger 7.5 Final

[Endo]

The final release of MSN Messenger 7.5 brought a lot of new features, but one of those features is predestined to become a major spam magnet and Internet Explorer crasher. We are talking about the nifty msnim:// Internet Explorer protocol.

1) A simple JavaScript loop could crash Internet Explorer.
A rather simply crafted JavaScript (only 3 lines of code) could crash Internet Explorer and annoy the user before doing so. By keeping on calling the msnim:// inside a one millisecond timed loop, you can not get rid of the popup asking if you wish to start a conversation, and render Internet Explorer locked up.

2) Easy bait for spam crawlers.
Only a few years ago spam companies realized that they could harvest e-mail addresses just by using an automatic webpage scanner, it took years to convince people not to publish their email address on a webpage because of this. This new protocol is by far most the easiest target for spam crawlers in the world, since the only way to start a conversation from a website is by putting your email address in the url… running around naked on the street with a four meter wide neon sign with your email address will probably generate less spam.

3) Reverse Psychology.
The last trick that can be performed with this new technology is the most disturbing. By tricking users to start a conversation they have been lured into a spam list trap. The only thing the spam companies would have to do is put a home-brew client behind it, that logs anything that looks like a email address. I wonder how many people will click yes if they see a MSN Messenger screen asking "Do you wish to start a video conversation with xxx_hotsexy_girl@hotmail.com".

How to protect yourself from these things?

* Never post your email address on a website, even if it’s useful.

* Don’t just accept conversation invites that pop-up on your screen.

* Alternative browsers like Firefox aren’t affected, since this is a Internet Explorer only feature.

* Disable the new protocol in Internet Explorer (how-to below)



How to disable the msnim protocol:

1. Hit start, run and type regedit
2. Go to the following key: HKEY_CLASSES_ROOT\PROTOCOLS\Handler\msnim
3. Change the value of the CLSID to 0.

(to re-enable it change the CLSID to {828030A1-22C1-4009-854F-8E305202313F} )

[color=\"red\"][i]* Warning: Editing your registry, if done incorrect can have inhuman effects on your system. Killagraphix Admins advise that you create a back up of your registery before even editing it.[/i][/color]

[url=\"http://mess.be\"][u][Source][/u][/url]

[Trinity]

Why doesn't this suprise me? Bring on Google talk!

[Electrix]

ditto trin =o <3 google talk

[Tibs]

* runs around naked on the street with a four meter wide neon sign *

[Josh]

ewww, we don't want to see THAT tibs. :| *starts spamming tibs now!* /biggrin.gif\' class=\'bbc_emoticon\' alt=\':D\' />

[Rift]

just dont hold it over your head /biggrin.gif\' class=\'bbc_emoticon\' alt=\':D\' />

[radar]

*distributes fliers to the city with his email address on them*

mind you, it is a gmail account so 99.99% of spam gets sent to the spam folder and owned within 30 days.