Onderwerp: KaZaA - Bad Zone

To follow up my mid Oct post:

KaZaA is still launching ads in the local zone. KaZaA was contacted 6 Jan
03 via their bug report page.

"Pop-up ads are being spawned from the local hard disk. This puts them in
the local zone. Scripts running in this zone can be harmful."

I am now awaiting their response.

To immunize KaZaA from this defect I have removed the permissions from the
directory it launches ads from. This has a nice side effect of not showing
ads. The directory to secure is: %WinDir%\AdCache

David

Just be aware that, in order to stop pop up ads, Kazaa Light installs its own
HOSTS file into %Windir%. This has the negative affect of not allowing you
to view several legitimate web sites, including Yahoo Maps, since the HOSTS
file redirects the URL to your loopback adapter.


------
Kazaa lite doesnt have ads or spyware. http://www.kazaalite.com/

PLUS it works great with Wine (http://www.winehq.com/)

On Tue, Jan 07, 2003 at 11:53:05AM -0700, David Krum wrote:
> To follow up my mid Oct post:
>
> KaZaA is still launching ads in the local zone. KaZaA was contacted 6
> Jan 03 via their bug report page.
>
> "Pop-up ads are being spawned from the local hard disk. This puts
> them in the local zone. Scripts running in this zone can be harmful."
>
> I am now awaiting their response.
>
> To immunize KaZaA from this defect I have removed the permissions from
> the directory it launches ads from. This has a nice side effect of
> not showing ads. The directory to secure is: %WinDir%\AdCache
>
> David
>

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com

Also use http://www.dietk.com/

/Thomas

tony@777h.org wrote:
>
> Kazaa lite doesnt have ads or spyware.
> http://www.kazaalite.com/
>
> PLUS it works great with Wine (http://www.winehq.com/)
>
> On Tue, Jan 07, 2003 at 11:53:05AM -0700, David Krum wrote:
> > To follow up my mid Oct post:
> >
> > KaZaA is still launching ads in the local zone. KaZaA was contacted 6 Jan
> > 03 via their bug report page.
> >
> > "Pop-up ads are being spawned from the local hard disk. This puts them in
> > the local zone. Scripts running in this zone can be harmful."
> >
> > I am now awaiting their response.
> >
> > To immunize KaZaA from this defect I have removed the permissions from the
> > directory it launches ads from. This has a nice side effect of not showing
> > ads. The directory to secure is: %WinDir%\AdCache
> >
> > David
> >
>
> --
> Cannot find nsabackdoor.dll. Please reinstall Windows.

(slightly off topic)

> Kazaa lite doesnt have ads or spyware. http://www.kazaalite.com/
>=20
> PLUS it works great with Wine (http://www.winehq.com/)

One problem (at least to firewall administrators trying to block P2P
apps) is that KazaaLite pre-populates a specific registry key that has
information containing addresses of Kazaa peers in the network.
Unfortunately, some of these peers do not run on the typical 1214/tcp
port, so simply blocking that port inbound/outbound will not stop
KazaaLite.

Good news is that the key can be emptied in order to force a rediscovery
on 1214/tcp.

The (REG_BINARY) key is located at:
HKEY_LOCAL_MACHINE\SOFTWARE\KaZaA\ConnectionInfo\K azaaNet

Another thing to note is that Sharman Networks does not permit changes
to the Kazaa client and "You may be subject to legal action if you
continue to use the Kazaa Media Desktop in violation of this Licence."
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
3.2 Except as expressly permitted in this Licence, you agree not to=20
reverse engineer, de-compile, disassemble, alter, duplicate, modify,=20
rent, lease, loan, sublicense, make copies, create derivative works=20
from, distribute or provide others with the Software in whole or part,=20
transmit or communicate the application over a network.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

Otherwise, KazaaLite is a great application... ;-)

--Keith Young
--Security Manager, Montgomery County Maryland USA