Slashdot Mirror


New Messenger Has Same Old, Gaping Privacy Holes

An anonymous reader writes "Microsoft released the beta of the new 'Wave 4' Windows Live Essentials last week. The new beta of Windows Live Messenger 2011, while plugging some privacy holes and shoring up the user interface, fails to tackle the one biggest privacy-buster of all. Say you use Messenger to IM your wife. You also use Messenger to IM your old girlfriend. The next time your wife logs on to her Hotmail account — not Messenger, Hotmail — she will see that you and your old girlfriend 'are now friends.' It all happens without your knowledge or permission, and it happens even if you tell Messenger you want your personal information to be 'Private.'"

56 of 287 comments (clear)

  1. Thanks for providing a real world example.. by Niobe · · Score: 5, Funny

    ..we can all relate to

    1. Re:Thanks for providing a real world example.. by Anonymous Coward · · Score: 3, Funny

      Sorry, replace wife with mother, and girlfriend with the goatse guy.

    2. Re:Thanks for providing a real world example.. by larry+bagina · · Score: 5, Funny

      ahh, now I see the gaping hole.

      --
      Do you even lift?

      These aren't the 'roids you're looking for.

    3. Re:Thanks for providing a real world example.. by garcia · · Score: 4, Funny

      My wife would make the goatse guy look like a virgin if I ever did what the blurb suggested.

    4. Re:Thanks for providing a real world example.. by izomiac · · Score: 5, Insightful

      I detest examples such as this. They imply that you only need privacy if you're doing something wrong. Why not use one where a person is friends with both a fundamentalist christian and a well-known atheist, or a homosexual and a homophobe? There are countless examples of where doing the right thing has negative repercussions if the wrong people find out about it.

      Privacy isn't your right to get away with illegal or immoral behavior. If you frame it as such then people will rightfully point out that you do not have such a right.

    5. Re:Thanks for providing a real world example.. by noidentity · · Score: 5, Funny

      I think most of us are adept enough to look up things like this pretty quickly. I found lots of useful links explaining what these things are (wife, girlfriend) and was able to follow along.

    6. Re:Thanks for providing a real world example.. by Draek · · Score: 3, Insightful

      How in hell is chatting up with your ex-girlfriend when you're married something inmoral? at all?

      I know, I know, lack of experience to judge here in this forum so take my word for it: it's something perfectly normal, and relatively common as well. Yeah, some people can get a bit jealous but the same goes for, say, commenting how 'cute' David Beckham looks wearing the England uniform yet few (if any) would say that making such a statement qualifies as "inmoral" for a married woman.

      --
      No problem is insoluble in all conceivable circumstances.
    7. Re:Thanks for providing a real world example.. by MrNaz · · Score: 2, Insightful

      Bumping into someone accidentally is different from actively establishing communication with them. The other distinction to be made is that in your example, your wife driving past happens by chance. With the example in the summary, Hotmail reports your contact with your ex-GF to your wife, so its a certainty that all of your existing contacts know who you are in contact with.

      Your example is about as relevant to this scenario as a tyrannosaurus chasing a field mouse.

      --
      I hate printers.
    8. Re:Thanks for providing a real world example.. by interkin3tic · · Score: 2, Funny

      Why not use one where a person is friends with both a fundamentalist christian and a well-known atheist, or a homosexual and a homophobe?

      One potential reason: that sounds like the start of poorly-written sitcom, not a serious privacy problem. Not only would that have convinced fewer people it's a problem, but then some network would be premiering a horrible new show this season.

      Were the WB still around, it would probably be starting right about now in fact.

    9. Re:Thanks for providing a real world example.. by TubeSteak · · Score: 4, Insightful

      Privacy isn't your right to get away with illegal or immoral behavior. If you frame it as such then people will rightfully point out that you do not have such a right.

      Immoral behavior?
      WTF do morals have to do with illegal behavior?
      The courts have generally supported your right to privacy over the moral police.

      Now excuse me while I legally engage in some immoral sodomy with a consenting adult.

      --
      [Fuck Beta]
      o0t!
    10. Re:Thanks for providing a real world example.. by Killjoy_NL · · Score: 2, Insightful

      So thank god for gay marriage eh? eh? ;)

      --
      This is the sig that says NI (again)
    11. Re:Thanks for providing a real world example.. by ArsenneLupin · · Score: 2, Funny

      In Illinois, it's legal to fuck your congressman's wife so long as you don't pay her for it.

      ... but if you did, would you be charged for prostitution or for illegal campaign funding?

  2. Open communication? by 0100010001010011 · · Score: 4, Funny

    I understand the privacy implications, but maybe they could have chosen a better example.

    If your Wife has some huge issue with you talking to your Ex-girlfriend, there are probably other underlying things.

    Communication should be open, like this:
    "Oo, she has a nice ass"
    [girlfriend turns]
    "yeah, you're right"

    1. Re:Open communication? by Renraku · · Score: 5, Insightful

      You're living in a fantasy world.

      Here's how it really goes:
      "Oo, she has a nice ass."
      [girlfriend glares]
      "Why are you looking at her ass?"
      "Well, she walked by, I just kind of glanced there."
      "Why didn't you glance the other way?"
      "I don't know, I just didn't."
      "What's wrong with my ass?"
      "Nothing's wrong with your ass, I was just making an observation."
      "Are you saying my ass is fat?"
      "No not at all, I love your ass."

      The next day:
      "My boyfriend doesn't like my ass any more..I don't think he loves me."
      "Aw, it's okay sugar, there's boys everywhere! Let me introduce you to my friend Ronaldo, he's single!"
      "Well, okay, since my boyfriend obviously doesn't love me anymore."

      A week later:
      "Well since you have an infatuation with other women's asses, I'm leaving you for Ronaldo. At least HE says I have a nice ass!"

      --
      Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
    2. Re:Open communication? by Korin43 · · Score: 4, Insightful

      You're living in a fantasy world

      Or maybe you're living in relationship-hell. Why date someone so insecure that you have to lie to them?

    3. Re:Open communication? by twidarkling · · Score: 5, Insightful

      There's the issue. You assume that he's cheating. Nowhere is that implication beyond your own mind. Thanks for demonstrating why this is an issue.

      --
      Canada: The US's more awesome sibling.
    4. Re:Open communication? by secolactico · · Score: 5, Insightful

      A week later:
      "Well since you have an infatuation with other women's asses, I'm leaving you for Ronaldo. At least HE says I have a nice ass!"

      If you ever find yourself in that situation thank your lucky stars and feel pity for poor Ronaldo.

      --
      No sig
    5. Re:Open communication? by Anonymous Coward · · Score: 5, Funny

      You're living in a fantasy world

      Or maybe you're living in relationship-hell. Why date someone so insecure that you have to lie to them?

      I'm guessing that you've never dated any real women.

    6. Re:Open communication? by shaitand · · Score: 2, Insightful

      If you had dated any real women you'd realize that they are all psychotic bitches. If they aren't psychotic bitches then the only explanation is that they are sucking your buddy tom's dick every weekend.

    7. Re:Open communication? by shaitand · · Score: 2, Insightful

      I take it you are single? In what world do any women hit a better than 60% logical statement rate?

    8. Re:Open communication? by flaming+error · · Score: 2, Insightful

      > Why date someone so insecure that you have to lie to them?

      Because it beats being alone?

      We're all flawed humans. Insecurity isn't the worst problem a date/mate could have.

    9. Re:Open communication? by X0563511 · · Score: 2, Insightful

      The one where you don't settle for the first woman you find.

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    10. Re:Open communication? by sharkey · · Score: 2, Funny

      "Not a blowup doll"? You mean a Real Doll, Right?

      --

      --
      "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
    11. Re:Open communication? by Anonymous Coward · · Score: 2, Funny

      [citation needed]

    12. Re:Open communication? by icebraining · · Score: 2, Insightful

      Have you ever considered that your experience may be biased by the fact the only women you meet are the ones too stupid to get that you're a misogynist?

    13. Re:Open communication? by Lehk228 · · Score: 2, Interesting

      and that is why i date men

      --
      Snowden and Manning are heroes.
    14. Re:Open communication? by Hurricane78 · · Score: 4, Insightful

      No, you’re living in a fantasy world.
      A world that was parroted around so much by the losers of the world, that everybody started actually believing it.
      A world where what you describe is normal.

      Where the man has no spine and no dominance whatsoever. And hence the woman only uses him as a provider and as a slave. While she fucks someone else behind his back. And for good reason. Since that other man is the actual manly man with the spine and dominance, but he’s too “free” to be able to be much of a provider.

      Meanwhile we get told from childhood on, that being dominant would be wrong and men and women are equal. Has anyone looked at them lately? Or talked with the other sex? The needs and everything as so very different, they could as well be two species.
      But when you mention that dominance is a male thing, you always get those female and male extremist feminists who in a very funny quirk of nature want to make men and women completely equal, by running after *male* ideals, as if they were their own too.
      Meanwhile, every healthy woman shakes her head, since her ideas are *her* ideals. And dominance or other male things not being them is only a bad thing for actual sexists, who value male ideals higher. As I said: A funny quirk that those who do that, are the worst feminists. ^^

      Look, it’s simple: A woman simply loves the feeling of being safe and secure. She can still pull the strings if she wants. But I can completely relate to having a safe nest. Especially if I were by nature dedicated to be the “child expert”.
      (The sad thing, is that raising children is not the most respected and best paid job in our society. For both sexes. Mothers earlier, fathers later.)

      And then women get flooded with things that make them insecure.

      Conclusion: Be dominant and lead the way, but be there for her! And you know you are doing good, when she does not have bad thoughts about you or her, when you mention a nice ass. Because of how very sure she is because of how very sure and safe you are.
      Turn it around and think of it: If your wife would say that a man was very charming, when do you think it’s more likely she will think that maybe it’s a bit unstable with you both? When you just stay cool and maybe agree, not showing a big reaction? Or when you start to panic inside of “Oh god please don’t let her run away because oh god I’m so lucky that I got her at all!”?
      Hm? ^^

      See... :)

      --
      Any sufficiently advanced intelligence is indistinguishable from stupidity.
    15. Re:Open communication? by Hurricane78 · · Score: 2, Insightful

      I studied this aspects of social dynamics and psychology, and... well... I know for a fact that you never learned how to be a real man.

      Real men don’t have to lie. Because they define what’s OK and what not. And don’t let the women define their reality.
      Which does not mean the unfair shit that extreme feminists want to paint it as. Quite the opposite.
      The difference is: We don’t enforce. We offer. She accepts. Because she likes it.

      And here is the key: A real man does not have to lie or fear that he will lose her, because he does not depend on her. He does not need to take value from her. He offers. But not for free. For the worth he himself gives himself. The woman attaches to it. When she detaches, well, it does not really matter. He has the next one in about an hour. His state does not rise and fall with her acceptance. If he says that is ok, it is. Period. Or goodbye.
      (Of course if she has a good point, that’s nice too. And of course if by his own rules, he just fucked up, then he has to and will apologize and fix it. Point is: She accepted those rules when she came to him. That’s why it’s OK. You did not force her on those rules. She saw them and saw that they were good.)
      [Now you know why the women with servant husbands/BFs prefer to fuck someone who does the above, behind his back. ^^ I say they are right!]

      --
      Any sufficiently advanced intelligence is indistinguishable from stupidity.
    16. Re:Open communication? by Bottles · · Score: 2, Funny

      What the FU-

      That's why Tom from MySpace is auto-added to everyone who signs up.

      And that explains the grin in his avatar picture.

      Son of a bitch.

    17. Re:Open communication? by PrecambrianRabbit · · Score: 2, Funny

      Oh false antecedents, is there anything you can't imply? :-D

    18. Re:Open communication? by Tom · · Score: 4, Funny

      Uh, no. At least not that I could remember.

      --
      Assorted stuff I do sometimes: Lemuria.org
  3. so it's like,, by phrostie · · Score: 2, Insightful

    so it's like facebook?

    1. Re:so it's like,, by cosm · · Score: 2, Funny

      +1 Like

      --
      'We are trying to prove ourselves wrong as quickly as possible, because only in that way can we find progress.' RPF
  4. Re:Err what? by LBt1st · · Score: 3, Insightful

    Normal don't make it right.

  5. Ahh, the future of the internet... by fuzzyfuzzyfungus · · Score: 5, Insightful

    All the lack of privacy and cliquishness of the tiny little towns that people ran like hell to the big city to avoid; but with the systematic asymmetry of information that only modern technocratic corporatism can provide... Just lovely.

  6. Thats the biggest security hole? by hilather · · Score: 2, Interesting

    What about MSNs lack of even simple encryption? I don't know how many times I've seen people snoop on other peoples conversations over wireless...

    1. Re:Thats the biggest security hole? by fuzzyfuzzyfungus · · Score: 4, Insightful

      Lack of encryption is a pretty egregious offense; but a vulnerability that consists of making possibly-compromising disclosures specifically to people with which you have some sort of prior relationship, no matter where they are on the internet, is quite arguably more salient, for the vast majority of people, than a vulnerability that exposes their communications to technically savvy individuals within wireless range(if the wireless is unencrypted or weakly encrypted, or those individuals have the keys).

      Plus, lack of encryption is something that you can, with minimal effort(and the cooperation of whoever you are talking to, which is the harder part), solve on your own. Pidgin+OTR. Done, instant encryption that even the provider can't do jack about for any protocol supported by libpurple. The provider telling everybody you know who you have been talking to lately, on the other hand, is an unsolvable problem from the client side(barring the old "uninstall that fucker like a bad habit that owes you money and never touch it again" solution).

      And, ultimately, except in the case of financial matters, or malware that renders a computer unusable(where the damage is pretty much fungible, and it really doesn't much matter who inflicts it, it hurts the same), security vulnerabilities and privacy disclosure issues that specifically aim at people you know in real life hurt more than ones where random strangers can get the same data. Random malefactors on the internet can certainly steal your money, and a few hardcore sociopaths with nothing better to do might torment you just for giggles; but the people immediately around you are a large part of your life. Disclosures to the former are unfortunate. Disclosures to the latter are potentially devastating.

    2. Re:Thats the biggest security hole? by man_of_mr_e · · Score: 2, Informative

      None that i'm aware of. Same with most VOIP services. Skype has encryption, but they also tap peoples calls at the drop of a supeona.. Which is not a good thing even if you're not doing anything wrong (there are lots of people in jails and prisons for things they didn't do based on evidence which "seems to fit")

  7. Goatse Security by cosm · · Score: 3, Funny
    ...must still be fresh in people's minds...

    Gaping Privacy Holes

    while plugging some privacy holes

    your wife

    your old girlfriend....... your wife's logs

    she will see that you and your old girlfriend 'are now friends.

    you want your...... 'Private.'"

    ...or maybe just mine. Sounds like a bad 2girls1cup scene played out over IM's!

    --
    'We are trying to prove ourselves wrong as quickly as possible, because only in that way can we find progress.' RPF
    1. Re:Goatse Security by Anonymous Coward · · Score: 2, Funny

      That is probably because you are a sick fuck.

  8. Re:Err what? by magsol · · Score: 3, Insightful

    Aka, "Just because Facebook does it, doesn't make it right."

    --
    "I'd just like to emphasise that taking a million years isn't a metaphor here..." -Rich Bradshaw
  9. Re:Err what? by Anonymous Coward · · Score: 2, Informative

    You can untag yourself in a facebook photo, you can unfriend someone so they can't tag you, etc. With this, there are no options. Facebook isn't exactly the golden standard of user-controlled privacy settings, but it's better than this.

  10. Re:Err what? by minsk · · Score: 3, Informative

    I would LOVE for facebook to have a privacy option "Disable the ability to tag me in any photo"

    Like the privacy setting entitled "Photos and videos I'm tagged in", which can be customized to Only Me or blocked from specific people?

    I can't swear that it works properly. So test with someone other than your mistress first :)

  11. what a crap story. by bloodhawk · · Score: 3, Insightful

    Where is the option to mod the whole story as overrated/troll. Sigh

  12. Re:Err what? by spazdor · · Score: 4, Insightful

    Hang on a second here. Did you just point out that MSN works kind of like Facebook, and then insinuate that this means the privacy is fine?

    --
    DRM: Terminator crops for your mind!
  13. Deja Vu by Velorium · · Score: 4, Insightful

    So basically it's like what Google did with Buzz and Gmail contacts. You didn't learn from others' mistakes on this one did you Microsoft?

    1. Re:Deja Vu by vlueboy · · Score: 2, Interesting

      So basically it's like what Google did with Buzz and Gmail contacts. You didn't learn from others' mistakes on this one did you Microsoft?

      Yahoo has a Buzz competitor too. Windows Live/Hotmail, Google and Yahoo! Pulse's biggest downside is that none of them force people to use their real full names, so you can't expand your network with long-lost acquaintances.

      The new players still protect our privacy, but hinder people's being found: obfuscated URLs, hiding your name, sex location and relative age; not being indexed at the very top of Google's searches have killed their shine in light of the big social networks.

      For 3 years I slowly noticed Google, MS Live and Yahoo integrating chat, social information, avatars, new blogs, photo albums, status update broadcasts and crap mindful of dating sites. None of that has forced my friends, already deep in FB, to UPDATE their pre-Facebook site profiles using the new tools in their hands.

      (*) Funny that Facebook, in spite of all its privacy controversy, is so correct about e-mail address disclosure. I applaud their hiding your valuable e-mail address from the friend request process. Thus, people who are out of touch with you can attempt to contact you --and if things go wrong, you can unfriend them without worrying that in the process of finding you they would learn handles allowing them to bug you over Gmail / Hotmail and Yahoo chat until you personally accept them at a more serious level.

  14. Privacy Setting Windows Live by ShawnDoc · · Score: 4, Informative

    Can't you turn this off in the Windows Live privacy settings (not the Live Messenger privacy settings)?

    1. Re:Privacy Setting Windows Live by bloodhawk · · Score: 5, Funny

      yes you can, but lets not confuse a MS bashing with facts.

    2. Re:Privacy Setting Windows Live by bloodhawk · · Score: 2, Informative

      If you mean private as in the 3 default options, then no it doesn't, you have to explicitly go into privacy and then advanced and edit the settings.

      PRivate is defined as : allowing friends to still have some access.

      go into privacy settings->advanced->Basic Information->friends list and set who can see your friends list to "JUST ME"

  15. Re:This is so irrelevent it's not even funny. by westlake · · Score: 3, Informative

    Microsoft Messenger? Oh you mean that thing i don't have installed on this computer? The thing i specifically removed from the silent install disc i made?

    Relevancy is best seen from the view outside the basement.

    Messenger has 330 million users and is available in 50 languages. Windows Live Messenger

     

  16. Suspicious ones ARE the cheaters by phorm · · Score: 2, Insightful

    It seems that when I dated women who were suspicious, they were often the ones most likely to cheat, and somehow the ones that always had some personal justification for me.
    I'd talk to another girl, or maybe an ex, I must be into her, *even* if I notably ensured said ex knew I was in a happy relationship. Then the jealous GF would assume that because - in her mind - I was a cheater, it was OK to go and hit on other guys online (and in the last case, actually managed to be seeing another guy behind my back for months while STILL accusing me).

    Screw that BS. If you can't trust your partner, and/or your partner can't trust you, then you probably aren't meant to be together.

    Now in terms of the "nice ass" comment, that doesn't mean that as the relationship goes on you should neglect your GF. Don't stop giving compliments or doing nice things just because you've been together awhile... it's a failing many have past the "honeymoon phase".

  17. Re:Err what? by KahabutDieDrake · · Score: 2, Insightful

    Facebook is a social interaction system. IM is a communication system. They have entirely different expectations of privacy and function. It's really not that difficult to draw distinction between them and what functions should cross over and which should not.

    I think the bigger point here is that MSN is a crappy IM system trying to be a crappy social network. Neither of those things is terribly useful, so don't use it. Problem solved.

  18. Re:Microsoft: reminding us who's #1 in in-security by man_of_mr_e · · Score: 2, Insightful

    Privacy != Security, they're two different concepts, though they do have some inter-relation. Like when Privacy friends Security and Secrecy gets mad.

  19. Re:i suggest flowers by Renraku · · Score: 2, Funny

    Here's how it would go.
    "Do you still talk to your old girlfriends?"
    "No, not really. Why do you ask?"
    "LIAR! I saw that MSN notification. Why are you still talking to them?"
    "I'm not 'talking to them.' My ex added me to her friend's list."
    "So you ARE 'talking to them.'"
    "I haven't talked to her in over a year."
    "But it says you're friends with her! You have to talk to someone to be friends with them!"
    "No you don't..all they have to do is add you!"
    "If you think I'm stupid, you're WRONG."

    --
    Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
  20. Re:Err what? by hawaiian717 · · Score: 4, Insightful

    I'd go so far as to say that if Facebook does it, it's probably wrong.

    --
    End of Line.