MSN Censorship

[NoWhereMan]

When I heard of it I just thought that really the "p2m" thing is unsafe by design...

You're actually giving away your password, and it's obvious the client would decrypt it someway to login... they're not giving you any answers or feedback from Google because you're just not supposed to use an email account as a storage/sharing virtual device.

I'm not sure if this practice is against the gmail TOS at all and so ignoring your report would be actually a favor to you, as if I'm right they should/would deactivate your address.

bye

[Angelsing]

Your rights! but, the problem is beyond gmail, someone can changes your gmail account information to do ilegal operations, they (gmail) block yuor access account for 1 day if you has more than limit data transfer, but what happen if anyone steal your gmail account and do ilegal acts? yes, is user's fault for give the password, include encrypt, but the point... with little steps you can acces to all google services.

P2M should be fix in futrures releases, but, if you have a version not patched.. the bug is still ther... then google should be patch too... i think!  

BTW.... aMSN is greats!  :wink:

[NoWhereMan]

P2M should be fix in futrures releases, but, if you have a version not patched.. the bug is still ther... then google should be patch too... i think!  

I don't think so. It's not they're fault if you do something harmful with their services. I mean, would you sue Ford for losing your car, if you gave away your keys?

BTW.... aMSN is greats!  :wink:

sure it is

[Angelsing]

well, google change his political, when p2m is born, so p2m not was google fault, but they change his rules. i think google should change again, to protect his own interest... after legal problen in china  

[NoWhereMan]

let's come back in topic.
One way to leapfrog "censored" urls is using %nn codes in URLs
for instace %2e is the code for "."
so if you want to show your friend a link to your gallery, just use:
http://www.mysite.com/gallery%2ephp
it should work

bye

[kakaroto]

hehe, cool, nice trick NoWhereMan... maybe we should add that to aMSN!

[NoWhereMan]

it would be nice

[vivia]

Added to latest SVN.

I am just substituting the dot in fact, but it works You won't notice anything locally, you will see the dot, just the remote user will see the %2E instead.

Thanx NoWhereMan !

[NoWhereMan]

ur welcome
glad to help, and nice to see it added

[kakaroto]

For the interested, I just wrote a little code to directly get the censorship list from the servers, here's the result :

[10:41:35] Found new censored regexp : \.pif
[10:41:35] Found new censored regexp : \.scr
[10:41:35] Found new censored regexp : grouppicture\.php
[10:41:35] Found new censored regexp : groupicture\.php
[10:41:35] Found new censored regexp : gallery\.php
[10:41:35] Found new censored regexp : staff\.php
[10:41:35] Found new censored regexp : pics\.php
[10:41:35] Found new censored regexp : rottentomatoes\.us
[10:41:35] Found new censored regexp : msn\.php\?email=
[10:41:35] Found new censored regexp : download\.php
[10:41:35] Found new censored regexp : www\.baratinha\.mypets\.ws
[10:41:35] Found new censored regexp : www\.messangerstats\.net
[10:41:35] Found new censored regexp : www\.messengertools\.org
[10:41:35] Found new censored regexp : www\.stuffplug\.com/temp/downgrdr\.exe
[10:41:35] Found new censored regexp : 69\.56\.129\.67/gift\.com
[10:41:35] Found new censored regexp : xmas-2006
[10:41:35] Found new censored regexp : miralafoto/foto\.exe
[10:41:35] Found new censored regexp : 168\.169\.78\.19
[10:41:35] Found new censored regexp : profile\.php\?
[10:41:35] Found new censored regexp : tufoto
[10:41:35] Found new censored regexp : www\.hornymatches\.com
[10:41:35] Found new censored regexp : www\.iwantu\.com
[10:41:35] Found new censored regexp : www\.block-checker\.com
[10:41:35] Found new censored regexp : verti2/fantasma\.zip
[10:41:35] Found new censored regexp : www\.amigosparasempre\.smtp\.ru
[10:41:35] Found new censored regexp : www\.amigosparasempro\.smtp\.ru
[10:41:35] Found new censored regexp : armazfiles\.smtp\.ru
[10:41:35] Found new censored regexp : www\.chinacircle\.com
[10:41:35] Found new censored regexp : www\.mensagemparavc\.mail15\.com
[10:41:35] Found new censored regexp : www\.mprofiles\.net/members\.php\?msn=
[10:41:35] Found new censored regexp : www\.930le\.com
[10:41:35] Found new censored regexp : www\.66663\.cn
[10:41:35] Found new censored regexp : www\.shusu\.cn
[10:41:35] Found new censored regexp : www\.1717wan\.cn
[10:41:35] Found new censored regexp : www\.995ba\.com
[10:41:35] Found new censored regexp : www\.mydipan\.cn
[10:41:35] Found new censored regexp : www\.51kongqi\.com
[10:41:35] Found new censored regexp : www\.94nile\.com/apple
[10:41:35] Found new censored regexp : sweetpictures\.myphotos\.cc/katiesex\.pif
[10:41:35] Found new censored regexp : 201\.22\.6\.4/fotos/safada\.html
[10:41:35] Found new censored regexp : www\.life365\.com
[10:41:35] Found new censored regexp : www\.photogbase\.com/pictures\.php\?photo656\.jpg
[10:41:35] Found new censored regexp : chnstudio\.com/upload/impluse\.exe
[10:41:35] Found new censored regexp : shurl\.org/myhomepage
[10:41:35] Found new censored regexp : p1377\.pic-myspace\.info
[10:41:35] Found new censored regexp : www\.mypengyou\.com
[10:41:35] Found new censored regexp : pic831\.mp3-myspace\.com
[10:41:35] Found new censored regexp : www\.51pingguo\.cn
[10:41:35] Found new censored regexp : 88chi\.com
[10:41:35] Found new censored regexp : nihao52\.com
[10:41:35] Found new censored regexp : 81copy\.com
[10:41:35] Found new censored regexp : myonlinecam\.net
[10:41:35] Found new censored regexp : 77885\.cn
[10:41:35] Found new censored regexp : 51zhaogu\.com
[10:41:35] Found new censored regexp : 51shejiao\.cn
[10:41:35] Found new censored regexp : gangen\.cn
[10:41:35] Found new censored regexp : wangw\.cn
[10:41:35] Found new censored regexp : uglyphotos\.net
[10:41:35] Found new censored regexp : funpic\.de
[10:41:35] Found new censored regexp : 505united\.com
[10:41:35] Found new censored regexp : t35\.com
[10:41:35] Found new censored regexp : quicknews\.info
[10:41:35] Found new censored regexp : symantec\.com/security_response/writeup\.jsp\?docid=2004-120714-0643-99
[10:41:35] Found new censored regexp : members\.lycos\.co\.uk/svy21/t/contact\.php
[10:41:35] Found new censored regexp : sonresimler1\.googlepages\.com/ozelresimler\.htm
[10:41:35] Found new censored regexp : viotagallery\.com
[10:41:35] Found new censored regexp : www\.spotyourface\.net/main/pictures/sexy
[10:41:35] Found new censored regexp : image001\.png
[10:41:35] Found new censored regexp : image002\.gif
[10:41:35] Found new censored regexp : funbuddyicons\.com
[10:41:35] Found new censored regexp : wellwell\.biz
[10:41:35] Found new censored regexp : casedinjertionkderunhdaseo\.com
[10:41:35] Found new censored regexp : jertionkdewiondaserunf\.com
[10:41:35] Found new censored regexp : butuinkdesionmas\.com
[10:41:35] Found new censored regexp : imp\.exe
[10:41:35] Found new censored regexp : bush-gracioso\.exe
[10:41:35] Found new censored regexp : www\.windowslivemessenger\.biz/msn/msn\.php
[10:41:35] Found new censored regexp : memebers\.lycos\.co\.uk/getmessenger
[10:41:35] Found new censored regexp : get-messenger
[10:41:35] Found new censored regexp : belgravehelpdesk\.com
[10:41:35] Found new censored regexp : xpimad\.com
[10:41:35] Found new censored regexp : album\.zip
[10:41:35] Found new censored regexp : malbranche\.goracer\.de
[10:41:35] Found new censored regexp : albrahem\.com
[10:41:35] Found new censored regexp : improfile\.net
[10:41:35] Found new censored regexp : unknowntools\.com
[10:41:35] Found new censored regexp : www\.dreamlife365\.com/member/
[10:41:35] Found new censored regexp : hetandunhasde\.com
[10:41:35] Found new censored regexp : www\.mensageirovirtual\.land\.rup

so.. as you can see, there's a whole lot in there.. what really surprised me is the 'tufoto', that means anyone speaking spanish, if he makes a typo and writes 'tufoto' instead of 'tu foto' he'll just get his conversation closed without any 'reason' behind it...
stupid M$...

[Voxar]

For the interested, I just wrote a little code to directly get the censorship list from the servers, here's the result :
..
so.. as you can see, there's a whole lot in there.. what really surprised me is the 'tufoto', that means anyone speaking spanish, if he makes a typo and writes 'tufoto' instead of 'tu foto' he'll just get his conversation closed without any 'reason' behind it...
stupid M$...

I'm very interested as I'm trying to maintain a kind of anti-filter filter script for MSN Plus. Can you please elaborate on how you got this list?

[kakaroto]

in the main window, press Ctrl-S for the status window and in the bottom type :

Code:

getCensoredWords

read about the GCF protocol command in http://msnpiki.msnfanatic.com/index.php/MSNP11:Changes#GCF
The censored words are in the xml received, under the 'path' : "config:block:regexp:imtext"

[Voxar]

Thanx. It seems there is missing some characters at the end of each line

[20:27:23] Found new censored regexp : 930le\.co
[20:27:23] Found new censored regexp : 66663\.cn
[20:27:23] Found new censored regexp : shusu\.cn
[20:27:23] Found new censored regexp : 1717wan\.
[20:27:23] Found new censored regexp : 995ba\.co
[20:27:23] Found new censored regexp : mydipan\.
[20:27:23] Found new censored regexp : 51kongqi\.co

I don't know allot about the MSNP protocol or how to use it. Is there a way of running the protocol commands from amsn? Is there any tools for experimenting with MSNP? Could you please point me to some source files for examples?

I found

Code:

proc getCensoredWords { } {
    catch {::MSN::WriteSB ns GCF Shields.xml}
}

in protocol.tcl, but unfortunately I don't know tcl. Where is Shields.xml parsed?[/quote]

[kakaroto]

Hi Voxar. I don't there is a missing character at the end, I think that the regexp is meant to match only that part, so 930le.com or 930le.col would match...
You can send MSNP command using the Tcl command :

Code:

::MSN::WriteSB ns COMMAND PARAMETERS

like you can see above. you must be connected first. If you send a wrong command, then you will be disconnected from the server.
The Shields.xml is being received in response to the GCF command, so if you search protocol.tcl for the handler of "GCF" (just search for "GCF") you'll see where it's parsed.
You can do Ctrl-Shift-C from the main window to get a 'proper' Tcl console, and you can do Ctrl-D for the protocol log.
About tcl/tk you have great man pages at http://tcl.tk
and you can read one of my tutorials on fully understanding tcl/tk at : http://www.amsn-project.net/wiki/Dev:TclTk_Tutorial
Don't forget to read the msnpiki about the protocol...
have fun.

[Trappski]

I just noticed something...

If you send a link in this example:
www.vim.org/download.php

it would of course not be delivered...

but if you strip away the www. and send it as:
vim.org/download.php it will reach the other user...