Windows Vista Forums
Vista Forums Home Join Vista Forums Webcasts Vista Tutorials Tags

Welcome to Vista Forums we are your forum to discuss Windows Vista x64 and x86 systems. Whether you need help or just want to post an idea you have on Vista, this is the forum for you.
Register at Vista forums...the world biggest Windows Vista resource Join Vista Forums Now

Go Back   Vista Forums > Windows Live > Live Messenger

Live Messenger Conversation Privacy & Security

Update your Vista Drivers Update Your Drivers Now!!
Reply
 
Thread Tools Display Modes
Old 04-24-2008   #1 (permalink)
Howard
Guest


 

Live Messenger Conversation Privacy & Security

Hi all,

There are so many MSN conversation sniffer ads on the Internet. A search
with keywords: 'msn sniffer' returns 514,000 results. The first results says:
"MSN Sniffer - Caputre MSN chate on your network".
Apparently MSN chats can be intercepted on local networks. This seems to be
a very serious issue, but there seems to be no solution for this, and all
major IMs send plain-text.

Can anyone comment on this?

My System SpecsSystem Spec
Old 04-24-2008   #2 (permalink)
Jonathan Kay [MVP]
Guest


 

Re: Live Messenger Conversation Privacy & Security

Greetings Howard,

Messenger conversations are sent in plain-text and as such, if network traffic is passing by
a node on a local network, it can be sniffed.

If this is rather troublesome, you can use something like Simp to encrypt the traffic:
http://www.secway.fr/us/products/simplite_msn/home.php

--
Jonathan Kay
Microsoft MVP - Windows Live Messenger
MSN Messenger/Windows Messenger
MessengerGeek Blog: http://www.messengergeek.com
Messenger Resources: http://messenger.jonathankay.com
(c) 2008 Jonathan Kay - If redistributing, you must include this signature or citation
--



"Howard" <Howard@xxxxxx> wrote in message
news:0659C33B-8F72-446E-BBE5-002890B01E07@xxxxxx
Quote:

> Hi all,
>
> There are so many MSN conversation sniffer ads on the Internet. A search
> with keywords: 'msn sniffer' returns 514,000 results. The first results says:
> "MSN Sniffer - Caputre MSN chate on your network".
> Apparently MSN chats can be intercepted on local networks. This seems to be
> a very serious issue, but there seems to be no solution for this, and all
> major IMs send plain-text.
>
> Can anyone comment on this?

My System SpecsSystem Spec
Old 04-25-2008   #3 (permalink)
Howard
Guest


 

Re: Live Messenger Conversation Privacy & Security

Hello Jon,

Thanks a lot for the reply. Encryptions certainly will make the conversation
safer but they are required on both sides. This is quite impractical since I
cannot command all my contacts to install the same software... : (

So I'm wondering if Microsoft has any plan to add encryption capability
(preferably by default) to Live Messenger?

Also, will web-based messengers (such as meebo, webmessenger.msn.com, etc)
make at least outgoing texts from my side safer?

Cheers!


"Jonathan Kay [MVP]" wrote:
Quote:

> Greetings Howard,
>
> Messenger conversations are sent in plain-text and as such, if network traffic is passing by
> a node on a local network, it can be sniffed.
>
> If this is rather troublesome, you can use something like Simp to encrypt the traffic:
> http://www.secway.fr/us/products/simplite_msn/home.php
>
> --
> Jonathan Kay
> Microsoft MVP - Windows Live Messenger
> MSN Messenger/Windows Messenger
> MessengerGeek Blog: http://www.messengergeek.com
> Messenger Resources: http://messenger.jonathankay.com
> (c) 2008 Jonathan Kay - If redistributing, you must include this signature or citation
> --
>
>
>
> "Howard" <Howard@xxxxxx> wrote in message
> news:0659C33B-8F72-446E-BBE5-002890B01E07@xxxxxx
Quote:

> > Hi all,
> >
> > There are so many MSN conversation sniffer ads on the Internet. A search
> > with keywords: 'msn sniffer' returns 514,000 results. The first results says:
> > "MSN Sniffer - Caputre MSN chate on your network".
> > Apparently MSN chats can be intercepted on local networks. This seems to be
> > a very serious issue, but there seems to be no solution for this, and all
> > major IMs send plain-text.
> >
> > Can anyone comment on this?
>
>
My System SpecsSystem Spec
Old 04-25-2008   #4 (permalink)
Jonathan Kay [MVP]
Guest


 

Re: Live Messenger Conversation Privacy & Security

Hi,

I can't speak for the third-party web clients, but most are not using encryption either.

Is there plans to add encryption to Messenger itself? Unknown, plans haven't even been
finalized for the next release yet.
However, I can tell you that it's certainly something on the table and hasn't been discounted
yet (which I'm pleased to say for a change).

--
Jonathan Kay
Microsoft MVP - Windows Live Messenger
MSN Messenger/Windows Messenger
MessengerGeek Blog: http://www.messengergeek.com
Messenger Resources: http://messenger.jonathankay.com
(c) 2008 Jonathan Kay - If redistributing, you must include this signature or citation
--


"Howard" <Howard@xxxxxx> wrote in message
news:A105380A-9E24-4E31-88C0-37889F747609@xxxxxx
Quote:

> Hello Jon,
>
> Thanks a lot for the reply. Encryptions certainly will make the conversation
> safer but they are required on both sides. This is quite impractical since I
> cannot command all my contacts to install the same software... : (
>
> So I'm wondering if Microsoft has any plan to add encryption capability
> (preferably by default) to Live Messenger?
>
> Also, will web-based messengers (such as meebo, webmessenger.msn.com, etc)
> make at least outgoing texts from my side safer?
>
> Cheers!
>
>
> "Jonathan Kay [MVP]" wrote:
>
Quote:

>> Greetings Howard,
>>
>> Messenger conversations are sent in plain-text and as such, if network traffic is passing
>> by
>> a node on a local network, it can be sniffed.
>>
>> If this is rather troublesome, you can use something like Simp to encrypt the traffic:
>> http://www.secway.fr/us/products/simplite_msn/home.php
>>
>> --
>> Jonathan Kay
>> Microsoft MVP - Windows Live Messenger
>> MSN Messenger/Windows Messenger
>> MessengerGeek Blog: http://www.messengergeek.com
>> Messenger Resources: http://messenger.jonathankay.com
>> (c) 2008 Jonathan Kay - If redistributing, you must include this signature or citation
>> --
>>
>>
>>
>> "Howard" <Howard@xxxxxx> wrote in message
>> news:0659C33B-8F72-446E-BBE5-002890B01E07@xxxxxx
Quote:

>> > Hi all,
>> >
>> > There are so many MSN conversation sniffer ads on the Internet. A search
>> > with keywords: 'msn sniffer' returns 514,000 results. The first results says:
>> > "MSN Sniffer - Caputre MSN chate on your network".
>> > Apparently MSN chats can be intercepted on local networks. This seems to be
>> > a very serious issue, but there seems to be no solution for this, and all
>> > major IMs send plain-text.
>> >
>> > Can anyone comment on this?
>>
>>
My System SpecsSystem Spec
Old 04-26-2008   #5 (permalink)
Robert Moir
Guest


 

Re: Live Messenger Conversation Privacy & Security

Howard wrote:
Quote:

> Also, will web-based messengers (such as meebo, webmessenger.msn.com,
> etc) make at least outgoing texts from my side safer?
Do the sites use SSL? (I don't think webmessenger.msn.com does). If not,
then no. This traffic-sniffing problem isn't a instant messenger issue, it
is trivially easy for a knowlegeable person to capture web traffic on a
network unless that traffic is encrypted.

Even with SSL, the issues remain:
1) do you trust the website you're using? (your "etc" above can cover a lot
of ground, not all of it safe and well-lit).
2) it still isn't encrypted at the other end if the other end doesn't
support encryption. The whole of the conversation can be captured by someone
sitting in the right place.



My System SpecsSystem Spec
Reply

Thread Tools
Display Modes



Similar Threads
Thread Thread Starter Forum Replies Last Post
Live Messenger, Live Hotmail, and Windows Live Mail - Contacts Bob Lucas Live Mail 5 06-18-2008 10:15 AM
Live Messenger, Live Hotmail, and Windows Live Mail - Contacts Bob Lucas Live Messenger 5 06-18-2008 10:15 AM
privacy & security problems with vista MC1 Vista security 2 03-05-2008 02:53 AM
Live Messenger a security concern? dmex Windows Live 7 06-06-2007 11:21 AM
Yahoo messenger and Windows Live Messenger wont connect on Vista Murat Vista installation & setup 0 03-01-2007 10:06 PM


Vistax64.com is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media 2005-2008

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51