[sarahtowny]

Ven0m posted this on another thread, posted it here for your information. Thanks Ven0m :0)

Here's some of the current list, excluding exploits and other redundant things...

1. The size of the text input area in instant messages isn't saved.
2. Sometimes the instant message window size isn’t saved.
3. There is no way to turn off the Messenger tips (in the IM windows) in Messenger, other than a registry key from the v8.1.0.421 build.
4. My Profiles has been removed for unknown reasons (probably won't be added back).
5. Cannot perform : chat emotes in chats anymore.
6. Taskbar flashing for new messages received in chats don't work anymore (hasn't worked since v7.0).
7. Horizontal scrollbar still appears in the chat room user list if you minimize and restore the window (has for a long, long time now).
8. Version key is still stuck as 0.0.0.0, which needs fixed if using something like HyperIM for LaunchCast statuses.
9. Messenger locks up for no reason at times, especially with a captcha visible on screen. Could be possibly due to a bug in yui.dll.
10. Webcam servers are unstable and sometimes unusable, resulting in not connected messages, or for webcam sessions to drop completely.


Current Exploits:
NOTE: This is a list of the current exploits known going around right now.

- Pm's with a %20 indent on sender which equals a space is used to crash messenger (yahoos fault)
- Many Chat service packets used in amplification attacks via packetload built up and sent all at once.
- Donkey Punch chat room voice chat exploit which can make you lose all listeners (0 listening), and essentially making you 'suck the beep'.
- Voice 'lagging' that can cause Messenger to freeze up. It's a flaw within yacscom.dll.
- Users are able to launch denial-of-service attacks on the RTP servers of an individual chat room, which causes ALL users to lose voice chat due to the RTP servers having low bandwidth.
- Plugin offer exploit that can cause a victim's Yahoo! Messenger to crash.