0
Loonix

Censorship in MSN messenger

Recommended Posts

http://www.zoliblog.com/blog/_archives/2006/1/20/1716266.html

Quote

MSN IM now appears to block certain words, e.g. download.php, gallery.php …etc.

If you include these words in your chat session, on the sender everything appears normal, i.e. you will believe your IM just went through, however, the other side never receives it.



so, what do you all think about this? Personally, I've wanted to quit using MSN for a while already, the only thing that makes me keep using it, is that so many of my friends use it. With this, though, I will be starting to convert my friends, and quit using MSN. I do not tolerate that my conversations are being censored, without me even being notified. The list of words that are censored are being kept secret.

Share this post


Link to post
Share on other sites
PHP being what it is, could be a security issue MSN is figuring out how to deal with.

Hey, MSN's tools, MSN's rules. That's hardly "censorship". Don't like it, use a different IM.

But as for your personal conversations, you are on the internet after all, whichever IM you use. You should pretend the world is listening all the time.
Ohne Liebe sind wir nichts

Share this post


Link to post
Share on other sites
Look, I don't pretend to know what PHP and all that means, or why it would be something someone would want to censor out of people's IMs, but

I find it disturbing how easily people brush off censorship just because it's "so-and-so's rules" of the house. It's not "not censorship" just because you're using someone's network. Think about it: would you accept the notion of Bellsouth using computers to bleep out certain words you said on the telephone just because it's their lines? And if they had never even told you they were going to do it.

-
-Jeffrey
"With tha thoughts of a militant mind... Hard line, hard line after hard line!"

Share this post


Link to post
Share on other sites
PHP is a file type. Its a scripting language that is pretty cool and its extremely powerful in the right hands. That said, PHP also has security issues.

This is not censorship, but a security mechinism built in to provide a layer of defence against IM worms. If Microsoft allowed a hole to exist in their product everyone would be screaming louder about their lax security and why are they not trying to prevent worms in the first place. If you look in the MSDN its all layed out in there. The strings being filtered are gallery.php and download.php, actually it looks like .pif and .scr are possibly filtered too. For 99.999999% of the users of Messenger its not an issue. And these are directly to stop me from IM'ing you a link to a virus. With the current generation of self replicating viruses, as soon as you click the link to the virus if you do not have AV software up to date there is a good possibility that your entire contact book just got the link to the virus sent to them.

I 've found some tech info on it an its doing a realtime evaluation of the link to see if it matches potentially malious code and if so it blocks it automatically. I'm not liking the auto delete with out notifying the users, but in a few ways it makes sense. The real time evaluation makes it so that the string can be evaluated to see if its in a URI and if its good or bad instead of relying on the client software to make that decision.

Just remember your IM conversations are far from private. I used to read IM's all the time for random employees at my previous job. I was even told to from management. Google saves your IM's on its servers for later searches if you use the Google Talk. Just think what will happen if they are forced to turn over their search records to the DOJ.


As an extra thing, why do people not complain if their Internet Provider removes viruses for them off their email? Is that not a form of censorship too? Are you not infringing on the First Admendment rights of the virus to communicate freely? :ph34r:
Yesterday is history
And tomorrow is a mystery

Parachutemanuals.com

Share this post


Link to post
Share on other sites
Quote

Just think what will happen if when they are forced to turn over their search records to the DOJ.



Fixed it for ya! ;)

Very good post, btw. Good technical explanation.

Having said that, I also share Jeffrey's general disdain for censorship, including in IM's (except for virus protection). IM's are not like DZ.com, which is Sangiro's house, where you either opt in by following the rules, or you opt out by violating them. AN IM service (MSN, Google, Yahoo, etc.) is, in my book, akin to the phone company. If my phone calls had a 5-second delay on them so The Powers That Be could bleep out something I said before the person I was talking to heard it, that kind of censorship would be unacceptable.

Share this post


Link to post
Share on other sites
PHP having security issues has nothing to do with IMs. If this was it, microsoft really shouldn't let anyone use their OS, since it is so full of securityholes.

Why is the list of words secret? A point is that we don't KNOW what is censored, especially since there is no notification. If you got a warning, such as "this link could leat to potentially dangerous code", or something, it'd be fine (as long as you could turn off the warning...). But they choose to babysit you and "know better". Wether this is ok for 99% of the population.. well, you don't know that. Simply because you don't know what words are censored. download.php is a common filename on the internet. gallery.php is a very common filename that will occur in URLs to image gallerys... Censoring this is pure stupidity.

If they did not censor it, nobody would regard this as a hole in MSN. A hole in MSN would be that you can execute virus code on another computer, without that user installing your virus manually. And that is how 99.5% of all viruses are spread today: manual installation. Educating users would be a far more effective strategy than censoring them.

If an ISP blocks mails, without me ever getting any notification, then yes, I have a problem with it. But comparing "download.php" (yes, the TEXT "download.php") to a mail containing an actual virus is quite far fetched, don't you think?

Many use the "MSN can do what they want since it is their product" argument. I guess those who thinks so will also think it is ok when newspapers censors things they don't like.. Or simply lie about things, since hey, it's THEIR newspaper and if you don't like it, buy another one...

Quote

I 've found some tech info on it an its doing a realtime evaluation of the link to see if it matches potentially malious code and if so it blocks it automatically



well they microsoft engeneers perform at their usual low level. "download.php" is censored even if that is the entire message. I wonder how that text will harm you?

Share this post


Link to post
Share on other sites
Quote

]PHP being what it is, could be a security issue MSN is figuring out how to deal with.



PHP is a scripting language that is run on a server. You could say "computer code, being what it is..." or "the internet, being what it is...." and make equally much sense.

Quote

Hey, MSN's tools, MSN's rules. That's hardly "censorship". Don't like it, use a different IM.



Can't wait to hear you say that when we're talking about your favorite newspaper doing the same.

Quote

But as for your personal conversations, you are on the internet after all, whichever IM you use. You should pretend the world is listening all the time.



Irrelevant. We're talking censorship, people deciding what YOU are allowed to see. Insecurity if the internet in general is another discussion.

Share this post


Link to post
Share on other sites
Quote

Can't wait to hear you say that when we're talking about your favorite newspaper doing the same.



Your favorite newspaper does it all the time, which is why you need to read more than one newspaper.

This whole discussion is ridiculous. It isn't censorship. You have no idea how many dumbasses don't understand what they're doing on the 'net, and it is nothing more than good business practice to protect them since they far outnumber the geeks who understand what's going on.

And one more thing: you pay for your newspaper, you don't pay for MSN. You're gettting something for nothing, and if you don't like it, you're free to give it at any time.

rl
If you don't know where you're going, you should know where you came from. Gullah Proverb

Share this post


Link to post
Share on other sites
Quote

Quote

Can't wait to hear you say that when we're talking about your favorite newspaper doing the same.



Your favorite newspaper does it all the time, which is why you need to read more than one newspaper.



Newspapers does not censor like this. They put forth different points of view, and yes, one should definately read more than one, for that reason.

Quote

This whole discussion is ridiculous. It isn't censorship. You have no idea how many dumbasses don't understand what they're doing on the 'net, and it is nothing more than good business practice to protect them since they far outnumber the geeks who understand what's going on.



Not censorship? What do you call it then? MSN decides what you are allowed to see.. Call it whatever you want, I choose "censorship". Yes, most MSN users are dumbasses. But there's a limit as to how far you can go to protect someone. If a warning saying "This link can contain a computer virus, you must NOT click it unless you are 100% sure of what you are doing" does not help, well then you have done all you could.

I would even accept it if it was blocked, but you at least got notified, AND there was an option in the menus where you could turn off the filter.

Quote

And one more thing: you pay for your newspaper, you don't pay for MSN. You're gettting something for nothing, and if you don't like it, you're free to give it at any time.



I don't pay for any online newspaper. They are growing large, and they are ad-supported. I would NOT accept this kind of behaviour from them, and I doubt that too many others would either.

I can't believe that people don't react to the following points:
1. The list of words is currently SECRET. This means that you don't even KNOW what you are not allowed to see.
2. You are not notified about the censoring. This servers no purpose whatsoever.

Perhaps you like being babysit, I don't. Wouldn't it be funny if the government suddenly decided that any skydiving related information, ads, etc was to be censored because this sport is dangerous for people? It would decrease the number of fatalities since fewer people would be doing it...

Share this post


Link to post
Share on other sites
Quote

But there's a limit as to how far you can go to protect someone. If a warning saying "This link can contain a computer virus, you must NOT click it unless you are 100% sure of what you are doing" does not help, well then you have done all you could.



Even a bad lawyer could make a good case that you have not done all that you could.

I have seen this with my own two eyes.

If you really understood the current legal climate, you would understand why it has become necessary to do such things.

Quote

I would even accept it if it was blocked, but you at least got notified, AND there was an option in the menus where you could turn off the filter.



Do me a favor. Write to MSN, and ask them what's going on. A lot of this is speculative, so why don't you try for an answer from the horse's mouth before you get your knickers in a knot?

rl
If you don't know where you're going, you should know where you came from. Gullah Proverb

Share this post


Link to post
Share on other sites
Quote

Quote

But there's a limit as to how far you can go to protect someone. If a warning saying "This link can contain a computer virus, you must NOT click it unless you are 100% sure of what you are doing" does not help, well then you have done all you could.



Even a bad lawyer could make a good case that you have not done all that you could.

I have seen this with my own two eyes.

If you really understood the current legal climate, you would understand why it has become necessary to do such things.



I admit I have little knowledge about american legal system. But after being warned that the link probably is harmful, well screw that, *click*. Now you must either download a virus and install it YOURSELF (no, clicking a link does not install any virus), OR you must be running an OS without antivirus, firewall, and not having updated your OS (which happens automatically, for most). When people still manages to get viruses, I think it calls for educating the users, since that quite obviously is what is needed. Viruses will always be there.

And if this is such an easy case for a lawyer, why haven't I heard about any lawsuits about it?

Quote

Do me a favor. Write to MSN, and ask them what's going on. A lot of this is speculative, so why don't you try for an answer from the horse's mouth before you get your knickers in a knot?



I think I will do that. I posted here because I wanted to hear peoples opinions about it.

Share this post


Link to post
Share on other sites
Actually clicking a properly crafted link can result in a web browser being opened that is pointing directly to the infecting code with out the user needing to "install" anything. This is how a lot of Scumware manages to get installed. for example download.php@25.21.252.11\eicar.js can force the browser to open and instantly redirect to the JavaScript virus. (i'm not positive on the exact syntax, but its fairly close to that)

Call your ISP and the ISP of all your friends too to complain also. I know for a fact that a number of very large ISP's have devices that strip viruses and even entire emails that have viruses on them to prevent them from getting to the reciepents. Quite a few are even putting in spam management devices to minimize the amount of excess traffic that has to be carried over their lines. Is blocking those viruses censorship? Its the same exact thing.

I can sit here and send the EICAR virus to you and even though it is totally benign, it will get stripped via my ISP and possibly yours too. In the situation of an email and how easy it is to spoof emails you do not want to notify the reciepent and the sender since there is a good chance the "sender" is not really the infectded machine. The Reciepent doesn't need to be notified since masking techniques may be routing it to hundreds of addresses at the same time. Why send out all that traffic if its not needed?

The list is not "secret", you just need to know where to go look at. Its not a flashing list that appears as you start MSN, is that what you want? :S:D
Yesterday is history
And tomorrow is a mystery

Parachutemanuals.com

Share this post


Link to post
Share on other sites
Quote

Actually clicking a properly crafted link can result in a web browser being opened that is pointing directly to the infecting code with out the user needing to "install" anything. This is how a lot of Scumware manages to get installed. for example download.php@25.21.252.11\eicar.js can force the browser to open and instantly redirect to the JavaScript virus. (i'm not positive on the exact syntax, but its fairly close to that)



Wrong. If that was the case, we'd see ALOT more viruses than we do :)
Quote

Call your ISP and the ISP of all your friends too to complain also. I know for a fact that a number of very large ISP's have devices that strip viruses and even entire emails that have viruses on them to prevent them from getting to the reciepents. Quite a few are even putting in spam management devices to minimize the amount of excess traffic that has to be carried over their lines. Is blocking those viruses censorship? Its the same exact thing.



Again, pure text sent via IM is NOT the same as actual viruses. That said, I'd like to be able to customize my filter at the ISP, as in getting notified if a mail was blocked.

Quote

I can sit here and send the EICAR virus to you and even though it is totally benign, it will get stripped via my ISP and possibly yours too. In the situation of an email and how easy it is to spoof emails you do not want to notify the reciepent and the sender since there is a good chance the "sender" is not really the infectded machine. The Reciepent doesn't need to be notified since masking techniques may be routing it to hundreds of addresses at the same time. Why send out all that traffic if its not needed?



But if someone is on your MSN contact list, chances are they are not spoofed. I don't even know if it is possible. And please stop comparing text to executable code. They are very different.

Quote

The list is not "secret", you just need to know where to go look at. Its not a flashing list that appears as you start MSN, is that what you want? :S:D



Please give me a link to this list. In the last days, me, nor journalists who has made articles about this, has found such a list. In fact, when they asked microsoft about it, guess what.. it was "secret".

Share this post


Link to post
Share on other sites
Quote

I find it disturbing how easily people brush off censorship just because it's "so-and-so's rules" of the house.



good for you.

Quote

It's not "not censorship" just because you're using someone's network.



yes it is, not, that is.

Quote

Think about it: would you accept the notion of Bellsouth using computers to bleep out certain words you said on the telephone just because it's their lines?



I'm not a lawyer. I expect phone lines in the US are covered by laws preventing that.

MSN isn't keeping me from privately talking to my friend, they're setting limits on what I can do on their system.

Quote

And if they had never even told you they were going to do it.



And most people click through software license agreements without reading them. I'll put you into that group then.
Ohne Liebe sind wir nichts

Share this post


Link to post
Share on other sites
Quote

"the internet, being what it is...."



Yes. The internet being what it is. That's exactly what I'm saying.

Quote

Can't wait to hear you say that when we're talking about your favorite newspaper doing the same.



A newspaper reporter interviews me, they decide what statements are in, what's out, what to mis-emphasize, what to take out of context. Is that censorship too?

If the government clamps on a newspaper that's one thing, but your comment misses the mark.

You don't like MSN Messenger, don't use it. What would you say if the IM utility in question was open source? Would that be the same or different?
Ohne Liebe sind wir nichts

Share this post


Link to post
Share on other sites
Quote

And if this is such an easy case for a lawyer, why haven't I heard about any lawsuits about it?



I didn't say it was an easy case. I said even a bad lawyer could make a good case (meaning argument) that you have not done all you could.

However, the question you ask can be answered just as easily. The internet remains a very new area of the law, and the legal professionals are still working out the kinks.

A few years ago, we were all betting that no one would ever be stupid enough to try to make a case for libel on the 'net, but it has happened and will continue to happen.

http://www.phillipsnizer.com/library/topics/defamation_cda.cfm

Software liability and service provider liability issues are being discussed even as I write. I'm not certain if there have been any cases, but there will be. Here's a taste:

http://www.geinsurancesolutions.com/erccorporate/theinstitute/pc/inst_ind_prof_isl.htm

rl
If you don't know where you're going, you should know where you came from. Gullah Proverb

Share this post


Link to post
Share on other sites
alright, I still won't pretend to know anything about the legal system of the USA. But IF MSN could get in trouble because a user installed a virus because someone sent him/her the link over MSN chat protocol, then the legal system has a big problem, in my opinion.

My following arguments would mean repeating myself, so.. I'll leave it at that.

Share this post


Link to post
Share on other sites
so lets rephrase your original statement:

Quote

The internet being what it is, could be a security issue MSN is figuring out how to deal with.



By this analogy, we now have something like "since the internet can pose a threat, lets force filters on our users, and not even let them choose to turn them off, nor notify them when our filters censors something"

What I wanted to know was basically if people are ok with this, and... I guess most people are. :S

Personally I prefer the freedom to choose. And as you've pointed out, I do have that freedom, I'll choose another IM protocol, of course. It still worries me that people generally accept this kind of behaviour from the company behind the by far largest IM network.



Quote

A newspaper reporter interviews me, they decide what statements are in, what's out, what to mis-emphasize, what to take out of context. Is that censorship too?



There's a limit to how far you can stretch the analogy. If you sent them an article, and they removed crucial parts of it and printed it.. I'd have a problem with that.

Quote

You don't like MSN Messenger, don't use it.


Read my initial post again. This goes without saying.

Quote

What would you say if the IM utility in question was open source? Would that be the same or different?



same.

I should add that if you use another client than microsofts messenger, you will be notified that your message could not be delivered. The censorship happens on an msn server, not in the client.

Share this post


Link to post
Share on other sites
Quote

alright, I still won't pretend to know anything about the legal system of the USA. But IF MSN could get in trouble because a user installed a virus because someone sent him/her the link over MSN chat protocol, then the legal system has a big problem, in my opinion.



The legal system has a lot of problems, but saying that doesn't solve the problem. Neither does ignoring the consequences of failing to limit one's liability.

Microsoft's choice is to accomodate its users or to protect itself from litigation. Which would you choose?

rl
If you don't know where you're going, you should know where you came from. Gullah Proverb

Share this post


Link to post
Share on other sites
From the MSN Messenger Terms of Use

I bet MS uses their interpretation of "(3)" below to mean whatever they want it to mean:

However, we may monitor your communications and disclose information about you, including the content of your communications, if we consider it necessary to: (1) comply with the law or to respond to legal process; (2) ensure your compliance with this contract; or (3) protect the rights, property, or interests of Microsoft, its employees, its customers, or the public.

And then again, not a lawyer here, but the section below seems to mean that MS will continue monitoring your messages this way until the law tells them not to:

All parts of this contract apply to the maximum extent permitted by applicable law. A court may hold that a part of this contract cannot be enforced as it is written. If this happens, then that part will be replaced by terms that most closely match the intent of the part that cannot be enforced.

And if someone says "who reads this stuff, no one", ok, but on the other hand, no one can say they weren't told.
Ohne Liebe sind wir nichts

Share this post


Link to post
Share on other sites
misaltas, RhondaLea:

I know that microsoft has their right to do this, and from a business perspective, they may even be WISE to do so. But their right to do it was not my point. I asked if it is "right" to do it. Do you "like" that they do it. I guess I should do a poll on peoples opinions, but I'm really done with the topic. I wasn't made for speakers corner, I think. :P

Share this post


Link to post
Share on other sites
Quote

......was not my point.
....... I wasn't made for speakers corner, I think.



You will be hard pressed to find many threads on SC where the original poster's actual topic gets discussed for more than a few posts. This post of mine is a case in point.:P


Ps. Somewhere on these forums you will find a list of the typical participants in an Internet discussion - it is very funny but also quite accurate.



Share this post


Link to post
Share on other sites
Quote

misaltas, RhondaLea:

I know that microsoft has their right to do this, and from a business perspective, they may even be WISE to do so. But their right to do it was not my point. I asked if it is "right" to do it. Do you "like" that they do it. I guess I should do a poll on peoples opinions, but I'm really done with the topic. I wasn't made for speakers corner, I think. :P



The problem is that Microsoft is NOT the government - they can do pretty much what they like with THEIR product. While it is provided to the public, it is NOT public property - just like DZ.com.
Mike
I love you, Shannon and Jim.
POPS 9708 , SCR 14706

Share this post


Link to post
Share on other sites
Quote

Quote

misaltas, RhondaLea:

I know that microsoft has their right to do this, and from a business perspective, they may even be WISE to do so. But their right to do it was not my point. I asked if it is "right" to do it. Do you "like" that they do it. I guess I should do a poll on peoples opinions, but I'm really done with the topic. I wasn't made for speakers corner, I think. :P



The problem is that Microsoft is NOT the government - they can do pretty much what they like with THEIR product. While it is provided to the public, it is NOT public property - just like DZ.com.



You should probably read the rest of the thread before replying...

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

0