Is there a way to hack IM conversations?

[JS80]

I was IMing with someone from HR and she calls me to end the conversation stating that IT can read all our IMs. I insisted that you cannot hack IM conversations...

The only way I can think of where IT can read IMs is if you're using Trillian type software which records all convos or if they connect to your computer via the network (like a Trojan Horse). Can someone explain the latter way and if it is possible for IT to "see" your desktop without your knowledge?

Thanks,

JS

 

[StevenYoo]

VNC maybe? not sure

 

[Mik3y]

there are software available that keeps tabs on every click being pressed by the keyboard. it is all recorded and kept under tabs.

 

[Ketteringo]

Unless it's encrypted, it's all easily loggable. The packets are plain text.

 

[quakefiend420]

i'm sure there is

and if they have it set up properly they can remote into your desktop and you won't notice a thing

so yeah, they could read your ims

 

[tami]

they may be running keyloggers.

she's probably paranoid regardless.

 

[Goosemaster]

Why are you even associating yourself with vermin from HR?

 

[Lonyo]

Originally posted by: Goosemaster
Why are you even associating yourself with vermin from HR?

Possible hot vermin?

 

[Sqube]

If they're running keyloggers or monitoring your system in any way, they don't actually have to hack anything. They'll just have everything available to peruse at their leisure.

The important thing is to just make sure you don't ever say anything that could get you in trouble on a work computer.

 

[JustAnAverageGuy]

She is correct.

 

[SirPsycho]

It's easy to do... if you know what servers the traffic is being sent to, you can simply log everything that gets sent to or from those servers. Also, yes, there is plenty of software out there that can be used to remotely view your desktop. You should always assume that anything you do at work is being watched.

 

[cessna152]

http://www.aimsniff.com/ <--- Open Source Tool

I believe Websense and some of the other filtering software can also log/block IM conversations.

 

[Platypus]

very very easily

 

[jmcoreymv]

You can also just use a packet analyzer since most conversations are sent in clear text.

 

[Looney]

Originally posted by: JS80
I was IMing with someone from HR and she calls me to end the conversation stating that IT can read all our IMs. I insisted that you cannot hack IM conversations...

You don't know what you're talking about. You don't need to 'hack' IM. All you need to do is log all the IM packets (which i'm almost positive aren't encrypted), something very easily done.

 

[Zontor]

One word:

Ethereal....

Do it all the time.....use GAIM & at least encrypt your conversations.....(with other GAIM users....)

 

[thecoolnessrune]

Originally posted by: Zontor
One word:

Ethereal....

Do it all the time.....use GAIM & at least encrypt your conversations.....(with other GAIM users....)

GAIM FTW man!

 

[Rubycon]

Stop chatting on company time and get back to work.

Next thing will be a thread about how someone got fired because they were goofing off on the company computer. :disgust:

 

[Tiamat]

type in 1337 and romanized chinese at the same time. They wont catch on.

 

[Aves]

As stated, monitoring your IMs or anything else is trivial if the IT staff is remotely competent.

 

[everman]

And in other news, your tin foil hat may not be as effective as you thought it was. Unless the researchers are already under their control and the study is a farce :Q

 

[sigs3gv]

PGP over GAIM Encryption

 

[necine]

Encrypt your conversations if using AIM at work.

 

[AyashiKaibutsu]

My senior design project is a network monitor. It's main purpose is to track bad traffic (viral and other attacks), but one of the requirements is it works with IM data, email data, track usernames, and a bunch of other types of data/privacy issue stuff so yes it's possible to keep tabs on it when your sending the data through a network someone else controls.

 

[NikPreviousAcct]

Originally posted by: JS80
I was IMing with someone from HR and she calls me to end the conversation stating that IT can read all our IMs. I insisted that you cannot hack IM conversations...

The only way I can think of where IT can read IMs is if you're using Trillian type software which records all convos or if they connect to your computer via the network (like a Trojan Horse). Can someone explain the latter way and if it is possible for IT to "see" your desktop without your knowledge?

Thanks,

JS

There are several pieces of software out there for monitoring purposes that allow IT folks to watch what you're doing on your monitor just like you would. You can also sniff packets and watch the conversation in real-time.

It is entirely possible for them to be "hacking" your IM conversations, but it sounds like you're just another young'un who doesn't know what he's talking about. You're on the right track by asking questions, though.