dwergs says:
as of this moment it's down again. It could well be Microsoft addressing the security vulnerability mentioned in the post right below this one.
Please have patience while the Messenger ops team tries to fix the current issues so you can log into MSN Messenger, Windows Messenger and MSN Web Messenger again soon.
Display Picture vulnerability discovered in MSN Messenger 6
We have obtained new details on the previously announced Microsoft Security Bulletins. Core Security Technologies today published a vulnerability in MSN Messenger clients up to version 6. According to the report, using a specially-crafted MSN Display Picture, an attacker could trigger a buffer overflow vulnerability on a contact's computer and execute arbitrary code.
The attack would travel through the established chat session and would pass unnoticed by firewalls, network intrusion detection systems and even host-based personal firewalls and antivirus software. Windows Messenger and Windows Media Player are also affected by this vulnerability.
"This is a critical security flaw since it directly affects more than 130 million users and because the attack is very likely to go unnoticed by the several layers of security countermeasures commonly used today," said Ivan Arce, CTO at Core Security Technologies. "Since initially reporting the flaw, we have been working closely with [Microsoft] and we are pleased to see that a fix is now available."
NOTE: MSN Messenger 7 BETA is NOT vulnerable. Download it here.
>> Join the February Security Bulletins webast for a brief overview of the technical details followed by an extensive Q&A session. Tomorrow at this time and recommended to IT professionals only.
[Source: Help Net Security & Core Security Technologies]
More .NET Messenger Service Downtime!
Zero1 says:
As many of you may have already noticed the .NET Messenger Service is unavailable at the moment. The official Messenger Sever Status site is showing runtime errors and the MSN Messenger software itself is displaying something similar to this error message:
"We were unable to sign you in to the .NET Messenger Service at this time. Please try again later. 80072745"
A very recent downtime, caused by a hardware problem, lasted a few long hours. Let's hope this one is over sooner!
May we also remind you of the fact that today we are expecting a security patch affecting MSN Messenger.
UPDATE: About two hours, later the .NET Messenger Service returned. We have no specifics on the cause of this downtime, and no Microsoft employee (not even a cleaning-lady) has been fired yet.