By Anick Jesdanun AP Internet Writer
Thursday, October 23, 2003; 3:04 PM
NEW YORK –– Even more annoying than junk e-mail are all the spam messages that "pop up" through a little-used feature in Windows. As part of its spam-fighting efforts, America Online has been turning off that feature for its customers without telling them.
AOL spokesman Andrew Weinstein said the feedback has been all positive, and he knows of no complaints to AOL call centers about side effects on other applications that may need that feature.
Nonetheless, AOL's action worries some security experts who were told about it by The Associated Press.
"They are trying to do the right thing ... but you sort of feel dirty after you hear it," said Bruce Schneier, chief technology officer for Counterpane Internet Security Inc. "It's a very dangerous precedent in having companies go into your computer and turn things on and off."
"From there," he added, "it's easy to turn off competitors' services."
Pop-up spam differs from pop-up ads in that no Web browser or Web site visit is required. Instead, these ads take advantage of a messaging function built into many Windows operating systems.
The function, generally enabled automatically when computers are shipped, was designed for computer network technicians to, for instance, warn people on their systems of a planned shutdown. Some applications also notify users of such actions as a network printer finishing a task.
About a year ago, spammers figured out that they, too, could exploit it, making ads automatically appear on users' screens at any time.
AOL — along with other Internet service providers and makers of security firewall products — responded by closing many of the Internet ports used, but closing all could disrupt other applications.
AOL then developed a tool that users could run to turn off the feature entirely, but few bothered, even though complaints about such messages kept growing, Weinstein said.
