Windows/NetBIOS pop-up Spam:

bofus writes "This article from Wired News presents a new way to deliver unsolicited advertising content - the MS Windows Messenger service. It appears that the client software hasn't been widely distributed yet, but it's probably only a matter of time before a free clone is circulating. This method could become the delivery method of choice for all kinds of unsolicited junk, given the number of unsecured PCs out there. On the flip side, if you run a relatively secured machine and have some sort of firewall, this probably shouldn't concern you."

Comments

Good.

[forged]

Every exploit eventually produces a patch (or make people aware) to make the default OS settings a bit less brain-dead stupid open. People actually connect to the Internet these days.

Re:Does anyone here actually understand TCP/IP?

[AKnightCowboy]

You are forced to block both TCP and UDP for any given port number. Because of this, you end up blocking more than is required.

And the problem with this is what exactly? Your firewall should block everything unless you specifically exempt it. Only people living in 1994 are still trying to play the "I'll just block dangerous ports" whack-a-mole game with their firewalls. Any el-cheapo home Linksys box will block all inbound connections by default. There isn't any reason to be using NetBIOS across the Internet period. It's a horribly insecure protocol that was never designed to be used across a WAN. Keep it on the intranet where it is meant to be used.

People are reading part of the article wrong...

[michrech]

I've seen several posts now where the following text is read wrong (either by reading to fast, or skimming, or something). Figgered I'd clear up the confusion...

Zoltan Kovacs, founder of DirectAdvertiser.com, said the company has sold about 200 copies of the program since launching two months ago. According to Kovacs, the software is ideal for advertising 900-number and other telephone services.

"I have customers who call me back and tell me they love it and it generates hundreds of calls right away," said Kovacs, who noted that Direct Advertiser is a good alternative to bulk e-mail because its messages are not regulated by spam laws.

The above doesn't mean that Joe User, sitting at his desk receiving all the spam via this new method, is calling and saying how they love it -- as several posts have noted. It means that Joe Spammer, the lowest form of life on earth, is calling and saying how they love the 'product' that directadvertiser.com is selling. World of difference there.