Instant messaging (IM) is a form of communication over the Internet, that offers quick transmission of text-based messages from sender to receiver

learn more… | top users | synonyms

15
votes
7answers
15k views

Which Instant Messaging services use or allow secure protocols, and what do those protocols cover?

We all know there's a myriad of Instant Messaging (IM) services out there. But, which of these services uses or permits protocols that actually secure your communications? For those that do, what ...
15
votes
2answers
5k views

The inner workings of iMessage security?

This is a very interesting article about the iMessage technology used in Apple's very popular communication devices. So far, there has not been much technical details released by Apple. Hopefully ...
11
votes
3answers
12k views

Is Telegram secure?

There is a new WhatsApp-killer application called Telegram. They said that it's open source and that it has a more secure encryption. But they store all the messages in their servers and WhatsApp ...
10
votes
5answers
2k views

Is Skype secure enough to transmit passwords?

Is it considered "secure" to send a password in a skype message and delete the message after the recipient remembered the password?
9
votes
5answers
2k views

Can voice chat be spied?

I wonder if voice chat (via public services like yahoo, google talk, skype, etc) is practically secure? Is it possible for the ISP or any middle point? I do not consider hacking the computers, but ...
7
votes
1answer
452 views

What are the main issues and best practice security controls when exposing SIP and H.323 to the Internet?

What are the main issues and recommended controls when exposing SIP and H.323 to the Internet (could be for voice, video, and instant messaging traffic or all three)? Specifically I'm looking for ...
6
votes
4answers
10k views

Can Skype chat be protected from snooping? Are there safe alternatives?

I use Skype a lot. With all of my clients, staff, contractors and friends, however, the acquisition by Microsoft worries me, as two of my clients are direct MS competitors, and I often work on long ...
6
votes
2answers
537 views

How is OTR messaging with Socialist Millionaire Protocol (SMP) protected from Man In The Middle?

So imagine the next situation: Alice wants to initiate OTR instant messaging session with Bob but Joe is Man In The Middle. Alice negotiates a shared secret 'X' with Joe (thinking he is Bob) using ...
5
votes
2answers
9k views

Does chatting over Skype expose my IP address?

Is there a way to identify a person's IP address in Skype, when you're chatting with them? Does this depend on their Skype settings? And if you've recorded chat messages, can they lead to the actual ...
4
votes
5answers
869 views

Most Efficient way of Encrypted Chat

I'm creating a server where people can come and talk to each other. I'm mostly doing it for a fun project, here's my question. I'm using RSA for encryption/decryption, so only the clients will know ...
3
votes
1answer
194 views

What project is a good SILC substitute?

As time has marched on, it would appear that the Secure Internet Live Conferencing (SILC) client/toolkit have lost a bit of steam, I can't find any current mailing lists, their website doesn't seem to ...
2
votes
0answers
154 views

Does OtR require than IM applications remember multiple keys per contact? [closed]

I noticed the Guardian Project has developed a converter to move your off-the-record messaging keys between different IM applications. I'm curious what happens if your using multiple off-the-record ...
1
vote
1answer
197 views

Is there any documentation or reviews about LINE messenger security?

I tried to find any documentation about the security of LINE messenger, but I couldn't. Is there any documentation or reviews about the communication protocol it uses, and whether or not it uses ...
1
vote
1answer
803 views

How does wireshark detects online-messenger traffic?

I have been working on how to find use of online messenger (e.g imo.im, ebuddy) using wireshark. I'm doing , as i need to build SIEM (security information event management) use-cases which detects ...
1
vote
1answer
132 views

xmpp ssl cipher negotiation

Does anyone know how ssl ciphers are nogitiated via the xmpp protocol. When I capture packets, I see: <starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'/> There is no hello server/client or ...
1
vote
2answers
113 views

How can I catch an Instant Messenger Identity Thief?

Here is the scheme. The identity thief logs in as my American friend in the instant messaging program QQ. (Did he steal her password or use some other exploit? I don't know.) The thief contact's ...
1
vote
1answer
181 views

Are WhatsApp or Telegram secure enough to use for office communication?

We are thinking about switching from e-mail to instant messaging. Do you think, Apps like WhatsApp or Telegram provide enough security for that?
1
vote
0answers
47 views

Instant Messaging End-to-End

I plan to create an application for secure instant messaging, now I don't know whether or not I want to implement the encryption by myself. This project is also mainly for educational purpose so I ...
1
vote
0answers
62 views

Does Diffie-Hellmann (DH) key exchange protocol lower Off-The-Record protocol (OTR) security level?

Off-the-Record protocol employes Diffie-Hellman key exchange protocol (DH). DH protocol does not provide authentication of the communicating parties and, according to many sources, is vulnerable to ...
1
vote
0answers
263 views

OTR and/or SecureIM library for C# .NET [closed]

I'm looking for implementations (or even wrappers) for OTR or SecureIM encrypted chat protocols usable from C#. Currently I found none, and considering porting Java OTR library and/or wrapping ...
1
vote
0answers
140 views

Are there any instant messaging systems that offer resistance to traffic analysis? [closed]

I'm happily using off-the-record messaging now, but I'd enjoy exploring more traffic analysis resistant options? It appears the most visible ones like Tor chat are rather stagnant, or at least don't ...
0
votes
3answers
1k views

Which real time cross-platform chat applications exist with end-to-end encryption?

I am looking for an instant messaging / chat application which can be used securely across different platforms, eg Windows, Linux, BSD! Do any exist?