Jump to content

Windows Live Messenger

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by 83.104.59.53 (talk) at 19:00, 7 October 2007. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

For the current instant messaging client for Microsoft Windows, see Windows Live Messenger.
File:Msn 001..PNG
Developer(s)Microsoft
Stable release
7.0.0820 / September 11, 2007
Operating systemMicrosoft Windows
TypeInstant messaging client
LicenseFreeware

MSN Messenger is a freeware instant messaging client that was developed and distributed by Microsoft in 1999 to 2005 and in 2007 for computers running the Microsoft Windows operating system (except Windows Vista), and aimed towards home users, sos ya face. It was renamed Windows Live Messenger in February 2006 as part of Microsoft's Windows Live series of online services and software.

MSN Messenger is often used to refer to the .NET Messenger Service (the protocols and server that allow the system to operate) rather than any particular client.

Overview

The main use of the software is for instant messaging, although other features which now come as standard include support for voice conversations, webcams (MSN Messenger 7.0 and later feature full screen audio video conversations), transferring files, and built-in two-player online games such as tic-tac-toe. In a similar vein to many of MSN Messenger's competitors, MSN Messenger allows messages to be enlivened with graphical emoticons, sometimes called smileys, Flash animations called winks, animated display pictures, styled text, and many more with third-party add-ons.

Macintosh users have a combined home and corporate client dubbed Microsoft Messenger for Mac. Version 5.0 was released several months after MSN Messenger 7.0, but did not offer voice conversations, webcams, online games, and several other features already introduced and popular with Windows users. Microsoft later released version 6.0, which still does not support audio, video, or other extended features. There are no plans for a Macintosh version 7.0 or a Windows Live Messenger client.

In August 2004, Microsoft introduced a browser-based version of the MSN Messenger client which can be used on any computer with a compatible browser and access to the Internet, without the need to install the Messenger software beforehand. This 'Web-messenger' is very limited, and can only be used to chat. It is also possible to use the Messenger Service on a mobile phone using Microsoft’s MSN Mobile service. Again, Microsoft has elected not to allow their browser-based client to run on the Mac platform.

There is a large community of third-party developers who have created add-ons to extend the capabilities of MSN Messenger.

The limit of contacts allowed was previously 300, though it was raised to 600 in 2006.[1]

Version Overview

MSN Messenger 1 (1.0.0863)

The first product release, released July 22, 1999. It included only basic features, such as plain text messaging and a simplistic contact list.

When MSN Messenger was first released it featured support for access to America Online's AIM Network. America Online continually tried to block Microsoft from having access to their service until eventually the feature was removed, and has not re-surfaced in any later versions of the software.[2] Now the software only allows connections to the .NET Messenger Service, requiring a Microsoft Passport Network account to connect, as well as limited contact with Yahoo Messenger.

MSN Messenger 2 (2.0.0083)

File:MSN Messenger 2.0 screenshot.png
MSN Messenger 2.0 Before signing in

Released November 16, 1999. Included a rotating advertising banner and the ability to slightly customize the appearance of the chat window. It came as an install option for Mac.

MSN Messenger 3 (3.0.0080)

Released May 29, 2000. Included file transfers, PC to PC and PC to phone audio capabilities with Net2Phone, one of the first VOIP providers.

MSN Messenger 4.6

Released October 23, 2001. Included major changes to the user interface, ability to group contacts and support for voice conversations.

MSN Messenger 4.6 was based on Windows Messenger 4.0 and ran only on Windows 9x, ME, NT and 2000. Windows Messenger was provided for Windows XP.

MSN Messenger 5

Released October 24, 2002. Included UPnP (Universal Plug and Play) based file transfers and minor changes to the user interface artwork. This was the first version that was allowed to run alongside Windows Messenger on Windows XP, also Windows Media Player interface plug-in. MSN Messenger 5 no longer works on operating systems earlier than Windows 95.

MSN Messenger 6

Released July 17, 2003. MSN Messenger 6 was a major overhaul of the whole platform, upgradings its simple text-based interface to include customizable elements such as emoticons, personalized avatars and backgrounds.

MSN Messenger 6.1

Released October 23, 2003. This version focused on the conversation window, enabling users to hide the window frame and menu bar, and also the ability to change the theme colour of the window. The theme colour can be set differently for each user. The protocol version was also updated to MSNP version 10.

MSN Messenger 6.2

Released April 22, 2004. This was the last version of the MSN Messenger 6 series, most notable changes were contacts with mobile capabilities were more distinguishable (including a dedicated Mobile group), a connection trouble-shooter and the Launch Site feature was renamed to Fun & Games.

MSN Messenger 7.0

Released April 7, 2005. Brought along the winks features, which was previously only available in threedegrees. This version also advertises items to sell to you including animated display pictures, emoticons and backgrounds. The contact list window style was also updated to match instant message windows. This version also introduced the Xbox Live Integration feature. This is the last major MSN Messenger version for Windows 98.

MSN Messenger 7.0.0820

Released September 12, 2007. The released was as a result of a reported security vulnerability discovered in versions of Messenger older than 8.1. The vulnerability "could allow remote code execution when a user accepts a webcam or video chat invitation from an attacker. An attacker who successfully exploited this vulnerability could take complete control of the affected system." This led to an auto-update being released to all MSN Messenger versions. Users MSN Messenger 7.0 and below were required to update to this version, and 7.5 users were required to update to WLM 8.1, though had the option of using this version instead[1].

MSN Messenger 7.5

Released August 23, 2005. Introduced an updated Passport credentials system. New features are the Dynamic Backgrounds feature, Voice Clips and the msnim protocol handler, allowing Web sites to provide links which automatically add a contact or start conversations (for example clicking on link msnim:chat?contact=login@passport.net will start chat conversation with user login@passport.net). The Voice Clip feature lets you hold down F2 and record a message for a maximum of 15 seconds and send it to the recipient. The window for conversations changed slightly with a Video button and a different position for the webcam icon (under the display picture). This version runs on Windows XP and later. With the release of version 7.5, MSN Messenger started using Windows Installer [2] for its auto-update feature. When a user selects yes to an update prompt upon sign in, the application will download a MSP file specific to updating that version to the latest and execute in the background. The largest patch thus far is 1.5MB, relatively smaller than downloading the entire MSI installation package.

This version is no longer available for use, as when the user attempts to sign in, they are prompted with a message which forces them to download Windows Live Messenger, as a result of a security vulnerability.

Windows Live Messenger

Main article: Windows Live Messenger

In February 2006, MSN Messenger was renamed Windows Live Messenger upon its eighth version release.

MSN Web Messenger

MSN Web Messenger is a browser-based messaging program that allows MSN users to instant-message people on their contact list, from computers that do not or cannot have the program installed (ie public computers). Web Messenger was launched in August 2004, and is convenient for people who are using the internet away from home, or own computers that are some way incompatible with the MSN program. On the contact list for MSN Messenger users, the status of somebody using Web messenger is either displayed as a globe (), or by appending the word (Web) after their name, depending on the version of MSN Messenger used.

Protocol

MSN Messenger uses the Microsoft Notification Protocol (MSNP) over TCP (and optionally over HTTP to deal with proxies) to connect to the .NET Messenger Service — a service offered on port 1863 of messenger.hotmail.com. Its current version is 13 (MSNP13), used by MSN Messenger version 7.5 and other third-party clients. The protocol is not completely secret; Microsoft disclosed version 2 (MSNP2) to developers in 1999 in an Internet Draft, but never released versions 8, 9, 10, 11 or 12 to the public. .NET Messenger Service servers currently only accept protocol versions from 8 and on, so the syntax of new commands from versions 8, 9, 10, 11 and 12 is only known by using sniffers like Wireshark. MSNP13 will be the protocol used in Windows Live Messenger.

Xbox Live integration

As of MSN Messenger 7.0, the client now offers a level of integration with Microsoft's Xbox Live Internet Gaming service. Users of MSN Messenger can go to the Xbox Website and link their gamertag to Microsoft's .NET Passport network. This will allow MSN Messenger to report the user's Xbox Live friends list, as well as allow them to send game invitations to players, so that the user does not have to be on Xbox Live in order to arrange games. This feature goes along with Microsoft's continuing goal to place integration between their various services. After December 2, Xbox Live Integration had temporarily malfunctioned. This was due to the change in hardware and protocol brought with the release of the Xbox 360. The error was soon corrected. The Spring 2007 Update for Xbox 360 allowed MSN users and 360 users to chat simultaneously, and even lists what game is being played by an Xbox Live user to their MSN Messenger friends. This functionality does not include video or audio chat between XBOX live users and MSN users.

Games and Applications

Main article: Games and applications for Windows Live Messenger

MSN Messenger shares the same games and applications as Windows Live Messenger.

Competition

The most significant rivals of MSN Messenger are AIM and ICQ (both from AOL), Skype, Pidgin (previously known as Gaim), and Jabber based clients including Google Talk.

In China, an instant messenger named QQ is predominantly used. Although used little outside of China, its domestic users number as many as 226 million. However, its popularity has recently been greatly weakened, since the entering into the Chinese market of MSN Messenger. Up until now, MSN Messenger has taken about 17 percent of the Chinese market, a figure which is becoming increasingly larger.[citation needed]

On October 13, 2005, Yahoo! and Microsoft announced plans to introduce interoperability between their two messengers,[3] creating the second largest instant messenger userbase worldwide: 40% of all users (AIM currently holds 56%). The announcement comes after years of 3rd party interoperability success (most notably, Trillian, Gaim) and criticisms from Google that the major instant messengers were locking their networks. This interoperability became available in the next version of MSN Messenger, which was renamed Windows Live Messenger.

Microsoft has also had talks with AOL in an attempt to introduce further interoperability, but so far, AOL seems unwilling to participate.

Criticism

The protocol is closed and Microsoft has made two attempts to lock out third-party clients by requiring data transformed by the use of hash functions when connecting. However, both algorithms have been reverse-engineered.

Winks have a digital signature, which the official client always checks. It will not play winks that are not signed by Microsoft. However, it is possible for a user to purchase a wink from Microsoft's website. Some of these winks enable the user to insert a custom image, which will be displayed when the wink is played. This makes it possible to display graphic or offensive images to any number of people for less than three dollars.

Ever since MSN Messenger has been released, it has been targeted entirely towards Windows users, leaving Macintosh users with a limited client, however, numerous third party applications now offer webcam, winks and even nudging support for Mac users.

Linux users have also been effectively left in the dark, requiring third party software to log in and access their profile stored on the MSN Messenger servers. Such third party software is usually one of many alternative instant messaging clients, such as aMSN, KMess, Pidgin, Mercury, Licq or Kopete. Pidgin and Kopete are included in many Linux distributions, supporting a range of other instant messaging protocols, such as the AOL, Yahoo! and ICQ clients.

MSN Messenger contains an advertising bar as standard; some other IM programs (Pidgin, Trillian etc) do not. Although this is also reverse-engineered and deleted with a patch, critics consider the interface cluttered, with no options to edit it in an unmodified version.

Another criticized aspect of MSN Messenger is the type of ID used. Unlike other message clients, MSN users are identified by an email address. Therefore, posted MSN IDs can be harvested for junk email. This can pose a problem for users who wish to release their messaging handle but not their email address.

Security, and the risk of computer infection through IM-borne viruses or spyware, has also been a persistent concern for users of MSN Messenger (and other IM networks). See "Malware" below, and more details in the section entitled "Risks and Liabilities" in Instant Messaging.

When comparing with Yahoo's version of their instant messaging tool, Yahoo! Messenger, there was noticeable evidence that Microsoft were suspiciously one step behind[4] in their offering of new features. Such examples were MSN Messenger's nudges being similar in concept to Yahoo's Buzzes[5] (which were offered since June 2002), winks being a more primitive form of Yahoo's audibles[6] (available since May 2003), web messengers being introduced after Yahoo's introduction in June 2003:[7] (that allowed IM access from a web browser), and the introductions of two-player games and avatars also being later than that of Yahoo's.

MSN Messenger also requires Internet Explorer to be set on "online" status, while other IM only require internal settings.

Malware

MSN Messenger (along with other networks such as its successor Windows Live Messenger, Yahoo! Messenger and AOL Instant Messenger) is often used as a conduit or "vector" for delivering malicious software such as spyware, viruses, worms, and trojans to unsuspecting computer users. The two methods used by hackers to deliver malware over the IM vector are (1) sending a file transfer with a virus-infected file, and (2) delivering a message with socially engineered content containing a web address (URL) containing active malicious code. Viruses and worms with colorful names such as W32.Yalove or Troj/Msnfake-L have been identified as targeting users of the MSN Messenger network over the past few years.

The threat of infection by these two methods is substantial and growing. The IM Security Center, a collaboration between security companies and corporations, has tracked attacks over IM since 2003 and shows well over 1000 distinct attacks over the public IM networks. The first half of 2007 saw an 84% increase in IM attacks over the first half of 2006. While IM-specific attacks remain a small percentage of overall virus and malware threats, the continued growth in usage of IM, along with the rapid adoption of IM in the workplace (See Instant Messaging) make IM an attractive vector for hackers, and both individuals and companies must take precautions to avoid infection.

The most common method of delivering a malicious payload is the use of social engineering to construct a message that appears to be coming from a contact on the recipient's contact list. A socially engineered message is one that is written in a friendly, informal manner, that could easily be mistaken as coming from a friend. The message usually will say something like "Click here to see pics of me from vacation!" or "Is this you?" with a web address -- known as a "poison URL" -- for the recipient to click. Upon clicking the web address, the recipient is connected to a website containing active content, which is immediately downloaded to the recipient's computer. In most cases, the payload contains an installer, a number of hidden files containing text, and code which causes the same socially engineered message with poison URL to be sent to every contact on the contact list. When the message is sent to all contacts, the cycle starts again, as each contact believes they are receiving a message from a trusted friend. In this manner, IM-borne malware is capable of propagating very rapidly through company and external networks.

Worms and viruses are discovered on a regular basis by security companies, particularly by the three companies with IM-specific security products, Akonix Systems, FaceTime Communications, and Symantec. According to IM security researchers at Akonix and other security firms, the average number of new threats identified each month is 30 to 35, with a high of 88 in October, 2006.


Filtering controversy

Following the release of version 7.0+, there was a major uproar about certain messages being unable to be delivered through the Messenger network.[8] Messages containing ".info", "download.php", "gallery.php", "profile.php?", ".pif", ".scr" or ".script" (and many other extensions, filenames and URLs) closed the connection of the conversation, returned a "Failed to deliver message" or simply didn't appear, depending on the version of the client the person had downloaded.

A similar concept is "Shield Up", which allows the Messenger servers to send the client a list of blocked links and disabled features upon sign in. This method was introduced after vulnerabilities were found in the first versions that introduced Flash content (such as Winks, Dynamic Display Pictures, etc.).

The original intention of this filtering was to help prevent users from falling foul of malicious users, who often use URLs containing the filtered text to trick users into downloading viruses or spyware.

See also

References

  1. ^ http://messengersays.spaces.live.com/Blog/cns!1pa8Iikfy0xU3xf4W911Jq4Q!1607.entry
  2. ^ http://news.com.com/2100-1023-228960.html
  3. ^ http://www.vnunet.com/vnunet/news/2143773/yahoo-msn-marry-messengers 1
  4. ^ http://en.wikipedia.org/wiki/History_of_Windows_Live_Messenger
  5. ^ http://web.archive.org/web/20020603004714/messenger.yahoo.com/messenger/imv/
  6. ^ http://web.archive.org/web/20040526064745/pager.yahoo.com/
  7. ^ http://web.archive.org/web/20030607020732/http://pager.yahoo.com/
  8. ^ http://virtuelvis.com/archives/2006/02/microsoft-censoring-msn-messenger

== SOS YA MUM!!! 

==
Retrieved from "https://en.wikipedia.org/w/index.php?title=Windows_Live_Messenger&oldid=162918011"