Instant messaging: security and privacy concerns

Instant messaging is an evermore popular feature on the internet. But how many people think about the security features of their IM? Whether IM compromises security? Whether someone can eavesdrop on their IM conversation? Which programs allow for conversation storage?

A second major source of concern is the usage of IM by underage users. Who are your kids talking to? Where did they meet them? How easy is it to falsify information on IM?

Anyone can sign up and falsify information. That's one of the shortcomings of the web. Any person can falsify information and speak with your child. Are you viewing your child's transcripts? How much control do you have? Could they be secretly talking to people who may take advantage of them?

What kind of information do you share over Instant Messaging? Do you know who you are speaking to? Any conversation you have over IM is documented. Both parties for most programs now-a-days have records of their conversations. If you are using your company's computer: that conversation is their property.

Ridiculous Story of the Day

Instant messaging was a hot topic in the news in Sept. 2006 when sexually explicit transcripts between Rep. Mark Foley (R-FL) and his underage pages surfaced in the news media. Within days Foley resigned (that or faced expulsion from the house).

Oddly enough, after resigning Foley admitted he was an alcoholic and went into rehab, also stating that he was a gay man and had been molested by his priest when he was a teenager. Additional scandal was built around the potential of a House member knowing about his interaction with pages as far back as 10 years.

Instant messaging proved to bring to the surface some true abuse of power.

Major security issues with IM and what you can do to protect yourself:

1. Generally: the exact same rules as email guys. It's simple. Don't open files from people you don't know. If it's from someone you know, but still looks kind of fishy (for example, any unexpected .exe file), you may still want to contact them by phone or email. It's very possible, and it has happened before, that a hacker just broke into an account and used that person's profile to send viruses to everyone on their friend list.

2. Update your operating system often. That is, make sure to download any of the new patches or high priority updates available. These downloads tend to be specific solutions to newly discovered holes in operating system security.

3. Update your Instant Messaging software when available. Similar to operating system update, these new versions of IM tend to address security issues that the previous version may have had.

4. Use anti-virus software. Keep it updated. Anti-virus software can help to detect and remove IM viruses from your computer, but it's most pertinent (and helpful) if you keep the anti-virus software current.

5. Use anti-spyware software. Keep it updated. Surprisingly, some IM viruses may install spyware or other unwanted software on your computer. Anti-spyware software can help to protect your computer from spyware and remove any spyware you may already have.

6. If you are a parent, set up parental features on the IM to record conversation in archives so you can monitor your child's conversations. For many IM services, the parental features are part of the initial set-up or one of the tool options in the skin. Not all IM programs will allow archiving (AIM and Yahoo come to mind). So if you don't have an archive feature with your IM, you can use Trillian (an IM manager that is compatible for AIM, Yahoo Messenger, MSN Messenger, Google Chat and MySpace Chat). This program allows conversation archiving for all of these programs.

Also, there are several parental control software products available. Their program compatibilities differ, but they are probably the simplest way for you to monitor IM conversation. Some programs will even allow you to limit user time spent on IM and limit features that pose potential security issues.

7. Don't add people you don't know to your friend list. Sources say that spim makes up somewhere between 5% to 10% of IM traffic today.

Spim- is instant messaging spam, only it's much more annoying and disruptive than popups or email.

8. When creating a screen name, don't use any personally identifying information. Doing so could provide a great tool for phishing, social engineering, and other unwanted contact. This is specifically important if your screen name or email address is on their online directory.

9. Never provide personal information such as credit card numbers or passwords over an IM conversation.

10. If you are sending an IM at work, remember that the employer owns it and most likely can access it in archive.

11. Use a strong password. This can prevent someone from hacking into your IM account. To learn how to make a strong password, click here.

Rate this article

Questions about this topic? Ask them on our Contact Us page.

Bookmark this page