Showing posts with label Yahoo. Show all posts
Showing posts with label Yahoo. Show all posts

May 15, 2008

Yahoo's response to the flaw in invisible settings

Focus of the post:- Yahoo's response to the flaw posted here

from    Yahoo! Messenger <messenger-abuse@cc.yahoo-inc.com>
reply-to    Yahoo! Messenger <messenger-abuse@cc.yahoo-inc.com>
date    Tue, Apr 15, 2008 at 4:42 AM (i am a lazy blogger)
subject    RE: technical vulnerability report (KMM69165525V14715L0KM)
signed-by    cc.yahoo-inc.com
Hello,

Thank you for contacting Yahoo! Messenger.
 

We appreciate you bringing this incident to our attention.  Below you
will find a couple different ways to protect yourself from abuse.

In order to ignore a user, they cannot be on your friends list in
Messenger. So if you have them there you must delete the contact from
your Messenger List in order to ignore them. Your friends list will
supersede your ignore list.


When you ignore a contact, you will always appear to be offline to the
contact. They can never view your status or send you an IM.

There are several different version of Yahoo! Messenger, so make sure
that you follow the instructions for your particular version.

WINDOWS MESSENGER:
  

To ignore a contact:
1. Click the "Messenger" menu in Yahoo! Messenger and select
"Preferences."
 2. Click the "Ignore List" category.
 3. Select the option labeled "Ignore only the people below."
 4. Click the "Add" button.
 5. Enter the Yahoo! ID of the contact you want to ignore.
 6. Click the "Ignore" button.
 7. Click "OK" at the bottom of the window.
 8. You can ignore up to 100 contacts.

NOTE: You can remove a contact from your Ignore List by selecting the
Yahoo! ID and clicking the "Remove" button.

 To ignore anyone who is not on your Messenger List:
  

1. Click the "Messenger" menu in Yahoo! Messenger and select
"Preferences."
 2. Click the "Ignore List" category.
 3. Select the option labeled "Ignore anyone who is not on my Messenger
List."
 4. Click "OK" at the bottom of the window.

MESSENGER FOR THE MAC:

 To ignore a specific user:

 1. Click "Friends" from the menu bar.
 2. Select the "Edit Ignore List" option.
 3. Enter the Yahoo! ID of the person you wish to ignore exactly as it
appears on your screen.
 4. click the "Add" button and then click the "Done" button.

 To ignore anyone who is not on your friend list:

 1. Click "Friends" from the menu bar.
 2. Select the "Edit Ignore List" option.
 3. Enable "Ignore anyone who is not in my Friend List".
 4. Click the "Done" button.

MESSENGER FOR THE WEB:

Yahoo! Messenger for the Web behaves a little bit differently than the
installed client versions of Yahoo! Messenger.  There is currently no
option to ignore everyone who is not on your Messenger List, nor can you
ignore an user before they send you a message.

If you get a message from a person whom you wish to block, simply click
on the "Block" button in the upper right-hand corner of the conversation
window.  You will no longer receive messages from that person.

Thanks again for contacting Yahoo! Customer Care.

Regards,

Yahoo! Customer Care
For assistance with all Yahoo! services please visit:

  http://help.yahoo.com/
Thank you again for contacting Yahoo! Messenger.

The reply doesnt even mention the word invisible it talks about ignoring the user from the friend list.

Jan 27, 2008

Flaw in YAHOO! Messenger Invisible Settings

Focus of the post :- It is already public that invisible users can be detected using a couple of tools and sites.But yesterday i discovered that you can use the yahoo site itself to see if a person is invisible or not!!

In YAHOO messenger there are two ways to appear offline to a person:-

1.Your main status is "Available" and you right click on a contact go to Stealth Settings>>Appear permanently offline to id such as "haider".That is the case where you want to appear offline to few people (avoid 'someone') and be online to rest of your contacts.(Invisible to only specific people)
OR
2.Your main status is set to "Invisible" and you appear offline to all contacts unless you choose a contact specifically to be online.That is the case where you want to appear offline to everyone(avoid everyone) and be online to someone.

If you use the first mechanism to appear offline to 'someone',then 'someone' can know you correct status just by logging into his Yahoo Mail(Old Interface)>>Contacts.The smiley icon will show you the correct status.If you use the second method then correct status cannot be found using yahoo mail.You can use third party applications to know the correct status.Follow the next post to know more.Here is the screenshot:-

Checked on YAHOO Messenger v8.1.0.244
    • Yahoo's response is here