Windows Live Messenger blocks www.youtube.com

Not too long ago, users on the Neowin.net forums started complaining about not being able to send YouTube links to their contacts on Windows Live Messenger. I was skeptic at first, but it didn’t take me very long to confirm that is indeed the case.

As you can see, any messages that contain in text or links to “www.youtube.com” fails to be delivered.

Curious as a cat, I loaded up a network packet sniffer to find out exactly what’s going on behind the scenes. Technically, the message packets are in fact sent to the Messenger servers (so it’s not being blocked at your client), but the server sends back a negative acknowledgment (NAK) packet instead of an acknowledgment (ACK) packet. Simply speaking, the server is refusing the message.

As some people may recall, in 2006 there was a report quoting MSN Sweden admitting Microsoft is “censoring” messages it deems a security threat. How it does this is by matching messages with a known list of text strings which are commonly found in phishing and malware sites such as “download.php”. Microsoft doesn’t publishes which strings are on this list for obvious reasons, but a comprehensive list of known blocked strings can be found here.

As far as I know, there’s no known security exploits on YouTube at the moment and I can’t imagine how this could have been an accident. Conspiracy anyone?

Note: This blog entry was originally posted on feeds.feedburner.com. View original post