Window Live Messenger - Safe?

[ngaisteve1]

Hi, just ask, my company I worked before forbid us to Window Live Messenger in the office due to security reason. Is Window Live Messenger really unsafe to use?

[darksidepuffin]

There are two ways to answer this....the "anti-windows flame troll" way, and the "realistic infosec way".

I'll go with the latter. I work for a large global outsourcing company, and we are strictly forbidden from using any form of "external communication mechanism" while on the client network. This guideline comes down to infosec. If you can communicate with the outside world, you can exchange information that could pose a risk to the company you work for. Plus there's the [arguable] concept that you could recieve a virus...but 1. most large networks have internal anti-virus and 2. most IT professionals know enough to avoid viruses simply by common sense.

In general, every software program can [and likely does] have security holes, but my opinion is that this is more of a "information security risk" and perhaps "productivity issue" than a real security bulletin related concept.

[ngaisteve1]

Yeah I agreed with your points. Thanks for the reply.

[athomas]

You could use Trillian, probably the most secure and robust IM client out there...

http://www.ceruleanstudios.com

[Paul]

I would not recommend trying to around your company's rules by using something like Trillian. Even with Trillian if they blocked MSN ports then that won't work.

Like any other software MSN has security bugs. But more importantly these social networking programs/sites give IT administrator headaches because of how easy it is to fool many people that use these things. Not to mention the amount of time at work you waste if you are able to sit around and chat on MSN on all day. Did yoour company also ban any other instant messaging software?

[darksidepuffin]

You could use Trillian, probably the most secure and robust IM client out there...

http://www.ceruleanstudios.com


If you want to get technical, I could recommend Pidgin because it's open source and the security auditors could check the code for holes and internalize it..but yeah.

I guess the point is, any instant messaging on an internal network should probably be internal based...eg: Microsoft Office Communicator ("mock")...or some internally developed program that works better (I like the internal one we use, actually it made me consider writing one..lol) :]

[ngaisteve1]

I would not recommend trying to around your company's rules by using something like Trillian. Even with Trillian if they blocked MSN ports then that won't work.

Like any other software MSN has security bugs. But more importantly these social networking programs/sites give IT administrator headaches because of how easy it is to fool many people that use these things. Not to mention the amount of time at work you waste if you are able to sit around and chat on MSN on all day. Did yoour company also ban any other instant messaging software?

You mean my current company. I'm using company laptop. If I connect into company's network, I think the proxy will block instant messenger (IM). But, if I don't connect to company's network, then I can use IM. I don't usually connect to company's network coz I don't work in the office, but at our customer's site.

@darksidepuffin and @athomas, I never tried Trllian and Pidgin. Might give a try.

[AnthonyDamasco]

trillian is the way to go - just don't break any rules