Are IMs Secure?

[PeterGriffin]

Namely Yahoo, but can you point me in the direction of some articles that could explain some the security vulnerabilities association with installing an IM such as Yahoo, AOL or MSN on a business network?

[e980238]

Secure as in what?

Like making it possible for your computer to be compromised or do you mean being able to read someones IMs?

[VHockey86]

Well I dont really think ANYTHING on the web is truly secure. I've never had any problems with instant messengers, however they have been known to spread worms. Best thing to do is make sure you dont have the file protocols that the instant messengers use open (different IMs use diff ports). Also dont do anything stupid like open a file from someone you dont know well. If you use some common sense you will be fine.

[Praetorian]

http://gaim-e.sourceforge.net

There are encryption protocols available for *nix and Windows systems. Check the link above. I believe they're planning a Windows port, or already have a port.

That's the only way I know of to secure messages. As far as the overall security of the program...well I have no idea.

[PeterGriffin]

Well, you see I have an employee that wants to use IMs to "announce calls" to other employees. But I really don't see the need for this and I think that there could be possible security issues behind it (although, I'm not sure what kind, that is why I'm asking here). I want some kind of ammo to go back to this person and show them a site or two that would describe in detail the problems with putting something of that kind on our network.

http://www.tnl.net/newsletter/2001/aimsecurity/

http://zdnet.com.com/2100-1105-899485.html

http://news.com.com/2100-1040-899411.html


there is no totally secure aim program, thats free to my knowledge. If its something important dont trust the internet

[StealthyV]

I believe common corporate phone systems will solve your problem. the "message waiting" light on the phone flashes when, you guessed it, a message is waiting.
there could be other reasons the employee could be asking to use im, including recreational chat and other non-productive activities.
IMO, get a nice corporate inter-office phone system (possibly a LAN phone system) and call it a day. you've earned your vacation!
lol good luck

~Branson

[PeterGriffin]

Yeah, well my company is pretty cheap so the lan phone sys is out. But our phones already have the call on hold type thing so go figure. It is just another thing some phone person want to clutter our system and as you said, chat with their friends. I have to explain this to my boss though whom really like to IM idea. Needless to say, I some some brainless idiots in my workplace.

[davidamarkley]

Have you thought of TeamSpeak??



If you download Trillian(five-in-one IM client) it can do Secure IMs with others that use Trillian...

David

[VHockey86]

I would definately consider a program that sends out messages on the LAN, I think theres a program called "LanTalk" which just sends a message to a user in the workgroup and pops up a window. Not quite the same as an instant messenger, but easier than emails imo.

For security I definately woudlnt trust anything that first goes through an outside server before arriving at the recipient, aka AIM, Yahoo, MSN, Trillian, etc.