Slashdot Mirror
The America Online Protocol Revealed
Gods Misfit writes "The America Online protocol(Connecting, Logging In, Joining Chats, etc..) has remained a mystery for most of its life. The only way one could log into their AOL account was via the AOL software. A few months ago, some people set out to break down the AOL protocol and open the door for alternative America Online software. This document is the result: The AOL Protocol.
A sign on example for Visual Basic programmers has been written and is available here." I suspect a fair number of people never try Linux or one of the BSDs because they're moderately happy with AOL as an ISP, and switching OSes would mean switching ISPs at the same time. A shame that AOL doesn't make this kind of information more easily available.
How long until they make an arbitrary change that breaks all the "new" clients? While I don't understand why they'd care (the customer is still, in theory, paying for the service), the fact that they've kept it secret for so long makes me wonder if they'll let this slide. Not to mention their annoying policies regarding the AIM client (how many times did they break everybuddy?)
Send your friends messages of love at fuck-you.org
Seriously, I don't know why whenever something gets posted on /., the sentiment "Finally! Now the average user will use Linux!" has to be used. The simple fact is that the average user isn't savvy enough to use it, and there is a large group of users who ARE savvy enough to use it, but find setting it up to be a big headache.
America Online isn't going to be Linux's killer app.
(ducks behind asbestos wall)
I suspect a fair number of people never try Linux or one of the BSDs because they're moderately happy with AOL as an ISP, and switching OSes would mean switching ISPs at the same time. A shame that AOL doesn't make this kind of information more easily available.
Probably very few people using AOL would consider playing with *nix. If you're playing with other operating systems, you've probably already outgrown AOL. You're not burning ISOs from Redhat that you downloaded via AOL/dialup. If you're on AOL, you're happy and content and most probably don't want to be switching ISPs or playing with a new OS. Besides, just because you're on a new OS, doesn't mean you have to get rid of your M$ partition and AOL as your dialup. People can explore the goodness of *nix on that old computer in the closet they feel bad about donating to the Salvation Army.
The AOL protocal was a nice reverse engineering hack. Nice work fellows. AOL didn't make it more freely available because it was a proprietary technology. They'd prefer to keep it to themselves or license it out.. otherwise they would have used a published standard.
=steve
--- rapper/producer/bachelorette party stripper
I think that would only count if AOL claimed to be secure. That would be one interesting legal argument.
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
I suspect a fair number of people never try Linux or one of the BSDs because they're moderately happy with AOL as an ISP ...
Let's face it, the reason that AOL and Linux don't mesh isn't because there's no AOL-Linux interface. It's because people who use AOL use it for a reason - it's got a happy, friendly, push big rainbow colored buttons, don't-cut-yourself safety-scissors interface. Love 'em or hate 'em, it's what they do well - an interface so simple that even grandma can use the demon box.
Linux is still, even in its most user-friendly form, a system that requires you to get some dirt under your fingernails while you use it. It's still a power-user OS.
There just simply isn't a big overlap between the types of people who use AOL and the types of people who traditionally run Linux.
If it ain't broke, it doesn't have enough features yet.
Actually, it doesn't surprise me that they don't make it available. If they release that information, they lose an edge they have on joe average as an entry level computer user. How many times have you talked to someone who wanted to show you something that was on the 'internet' and in reality, it was something that was on a section of AOL? AOL has done a really good job of making a 'controlled' section of the internet we're they control the information. By having only one style of software they have more control also. Would YOU just want anything to connect to YOUR server and have authorization privleges? Of course AOL is very much based on server side scripting, and a butchered version of html. All aol sections are addressed with an aol://xxxx:xxxx:asdgfsadgas type link... a mix of alphanumeric strings, etc. Essentially it's THERE style of html distributed through a browser.
But in the end the bottom line is profit. You don't want to allow people to get onto the internet where you can't 100% control what the first thing they see is. AOL gives the illusion to first time joe averages that it IS the internet. My mom spent months on AOL without even using the actual internet and she thought she was on the internet. It's marketing genius. You control their access, you control the way content is shown, you give them places to spend their money and control the ways they communicate. Everyone does it the same way, so everyone is having a similar version of their own experience...
The AOL designers aren't dumb IMHO, sure it's not the service that I want as my ISP, but when it comes to marketing, they know what their doing...
For awhile they were going to make it so you could use them as a 'traditional' isp using Dial-up, but I don't think that anything really ever came of it.... I guess AOL users just like hearing 'WELCOME, YOU'VE GOT SPAM, (I MEAN MAIL)...'
[Something witty and intelligent should have appeared here.]
{Traicovn}
They fear that the change they make will kill their expensive toy and force them to go talk to a more computer literate friend who will once again berate them for using the most expensive ISP with the worst service.
I suspect that this doocument will be the source from which nasty new AOL hacks will be based. And now that it is out it is in very immature hands.What this will do. (maybe) is covered by point 8
Not that it matters to me because I don't use AOL
I used to have a cool sig, back when I cared
Public recognition of Visual Basic as a programming language by the /. crowd! Millions of Microsoft programmers, no longer afraid to talk about work at cocktail parties!
Woot w00t w007.
In my opinion, logging on and enjoying AOL's so-called services was never 1/10 of the problem as their stupid crappy propritary mail system.
Back around 1996 or so, I was part of an AOL beta program that released a MAPI interface for AOL mail servers. IE, you could add the AOL mail server to your Outlook config and download your AOL mail right into Outlook.
Of course, the AOL exec freaked out when they considered how many eyeballs their advertisers would lose if everyone uninstalled the AOL client and kept their mail via Outlook. So the program was canned, and I was unfortunately too short-sighted to save a copy of that MAPI tool before the area was closed down.
Ever since, I've been trying to get my sister/parents/grandparents off AOL. Not to mention that AOL never supported Windows NT because they couldn't figure out how to install their stupid AOL Adapter TCP shunt thing. So for years my relatives were forced to run a crappy 16-bit (Win 3.11) version of the AOL client for the sole purpose of checking e-mail.
AOL's mail service is terrible but a lot of people don't want to change their e-mail addresses. If you really want to do a great services to help newbies move beyond their AOL shackles...please, I implore you:
A) Reverse engineer the AOL mail protocol so that external programs can at least READ AOL mail (sending, unsending, and AOL custom features are optional)
B) Reverse engineer the AOL mail database (local copy of stored mail) so that it can be imported into another program.
Even after I got a couple family members to switch over to Hotmail, they still have to use the AOL client to read their old mail. It's that or save it all as flat text and lose all the important header information.
Also, a bonus to reverse engineering the AOL mail database would be the ability to sync mail with your Palm. The AOL client for Palm is 400KB and can only dial-up, not sync.
Please post reply if you know of any project working on the AOL mail/database formats. Thank you!
- JoeShmoe
-- I wonder which will go down in history as the bigger failure: the War on Drugs or the War on Filesharing
Here is the simplified version of the protocol:
void AOL()
{
while(connected)
{
send_advertisements();
monitor_browsing_habits();
monthly_fee++;
if(bandwith_to_spare)
send_internet_data();
}
return;
}
Life is the leading cause of death in America.
I can't wait for the first Linux-client. Why?
The only thing about AOL that's worth anything are the chatrooms. Unlike IRC, you can actually meet real, low-self-esteemed, fat chicks who'll put out for anyone willing to pretend to listen to them whine about how no one likes them.
I'd better stock up on condoms and twinkies, big dog is gettin' let out of the house...
If you were me, you'd be good lookin'. - six string samurai
(710)123-4567 is my phone line.
(456)123-4567 is an AOLnet dialin. Numbers mutilated to protect the guilty, of course. A few years and many many area code splits ago, we were all one code. More than a few lusers are confused by Windows' concept of "dialing location" and area code settings, and apparently more than a few of them are AOLers.
I get silent phone calls all the time, sometimes several in a row. Without fail, if I answer with a carrier, they connect.
Sometimes if I send "login:" they talk back. I've never bothered to get farther than that.
I've long dreamed of hacking up a barebones AOL emulator, just enough to push them a page that says "You dumbass, your area code settings are fux0red!" and then play some fart noises before dropping them.
Yeah, this is gonna rock. Not only do I get to fuck with their heads, but I get a free supply of AOL l:/p: pairs delivered to my desktop! Never know when those might come in handy.
Wouldn't this be considered illegal under the DMCA, since they reverse engineered AOL's proprietary protocol? If AOL had meant for it to be public, then they would have put it out themselves.
No. Reverse engineering algorithms protected only by copyright is always legal. DMCA makes it illegal to circumvent or reverse engineer copyright protection schemes. There is no evidence anything of the sort has been done.
Here is the file in PDF, rather than "write" format:
P rotocol.pdf
http://www.flyingbuttmonkeys.com/mirrors/The-AOL-
Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
The AOL protocol described is a modification of the old (1984) PlayNet error-correction and data communication protocol I devised (with some input from Steve Bohram, but it was mostly my design based on the Tannenbaum networking book).
CRC-16 was used because modems (300 baud) didn't have any error correction, and we could use tables to process the data 16 bits at a time without using too much memory or CPU (the servers were 12MHz 68010's).
Packets all ended in hex 0D because we were using Telenet and Tymnet X25 dial-in pads in line-buffered mode, because we were charged by the packet. We also munged the other fields to avoid 0D (that may be gone now). Also, they were limited to 256 byte lines; thus the length byte instead of something longer.
Bytes 6 & 7 (which the author doesn't understand) are sequence numbers used in the sliding-window error-correction protocol.
The two-character ASCII prefixes were the actual message types for data packets, and were the input to a multi-tasking state-machine language. EM for example was (IIRC) part of email, perhaps to turn on the 'MAIL' icon. (I forget all the codes, I'm afraid).
Z on the front seems to be an AOL addition.
I was at PlayNet from Feb '84 to Feb '86 (when we declared bankruptcy). AOL licensed the PlayNet software from us for a song when we were running out of money, and rebranded it QuantumLink (and made minor mods, many of which we did for them).
PlayNet ran out of money in Feb '86, though the service continued to remain up for the 1500-3000 subs for another year or two.
PlayNet got a cut of AOL gross revenues until they finally wiggled out of it right before launching America Online (a port of the software to the PC with considerable enhancement), at which point PlayNet's bankruptcy was closed.
The servers were Stratus fault-tolerant machines, and as of 3 years ago they were still using them.
They didn't manage to change the 10-character limit on usernames until a few years ago. That limit was because of the 40-character width of the C64 screen, a ',' between each name, 16(?) characters for the room name plus a space, and we wanted N (12? 15?) users in a chat room. The result was that there were 10 characters available for the username.
The algorithm in AOL for selecting usernames that resulted in JohnQ12345 was also part of the old PlayNet (server) software. Also the default initial passwords for "marketing" accounts (i.e. the free disks) of "word-word" is another thing thought up over lunch at PlayNet that still hasn't changed.
Many things have been added & changed - but far more than I ever expected remains the same. I figured they'd dropped the ECC protocol ages ago.
-- Randell Jesup
Well AOL the company isn't so hot because they didn't give away this information. However the main reason that AOL stinks as an ISP is because in order to connect you have to load this enourmous hog of a program into memory. With a normal dial up isp you use dial up networking, and with a NIC you load nothing. If we could write a very small program that simply connects to aol and establishes an internet connection, that would be fantastic. People could still use AOL, but it wont suck, as much.
The GeekNights podcast is going strong. Listen!
Back in 1995, Claris introduced Emailer, a Mac e-mail client application that could retrieve AOL mail, along with many other kinds of mail accounts. Development was continued on it for about 3 years or so, but it became an orphan when Claris became Filemaker, Inc and divested itself of non-database products. It was neglected and finally end-of-lifed by Apple in November 1998 at version 2.0v3. Most of the team that created it went on to develop Outlook Express for the Mac, which does not do AOL mail because AOL decided to stop licensing out the protocol. I can only assume that AOL realized they could make more money by forcing everyone to use their shitty built-in mail client and bombarding them with paid advertisements the entire time, than by licensing out the protocol to other software companies creating clean, elegantly-designed mail clients.
Six years later, Emailer still works great on Mac OS 9.x, and the original developers do not believe it should break under OS X. I still use it (as do a lot of people) and I still think it's the best mail client I've ever used, because it doesn't do HTML mail. Nothing but pure, speedy text.
~Philly
If you want more info from other sites, just use this google search.