Slashdot Mirror


Instant Message, Instant Transcript

shams42 writes: "Although the internet has been far from private for some time now, it seems that public awareness and concern over this issue is mounting. This article at CNN discusses the issue of companies monitoring instant messages for cyberslacking or leaking company secrets. There is also the possibility of them being included as evidence in court cases."

330 comments

  1. Jabber + SSL by finkployd · · Score: 4, Insightful

    Jabber over SSL would solve this problem.

    Finkployd

    1. Re:Jabber + SSL by cuteduo · · Score: 4, Informative

      If the companies are monitoring for so called cyberslacking it
      may not matter much if you are using SSL/SSH with your instant
      messaging. There is software for monitoring the users' desktops
      and keystrokes which is one of many tools that employers can use,
      not only packet/traffic monitoring on company networks. Just to
      add another formula to things, monitoring can be completely seperate
      from the computer, they (employers) can also use well placed CCTV
      systems.

    2. Re:Jabber + SSL by York+the+Mysterious · · Score: 3, Interesting

      At my school we are about to setup Imagecast 4.6 by Storagesoft. We already use it to deploy hard drive images of all our computers (greatest product ever and it smokes Ghost), but no we're looking at deploying their small management console. It does all the usual like allow us to send messages to computers, shut them down and all that good stuff, but now it comes with VNC built in so from our server we can monitor the screen of any computer. This isn't even the the products real use. Just a side feature. Just think what real snooping client/server apps are up to.

      -Tim
      www.newtechhigh.org

      --

      Tim Smith - Ramblings from Nerd Land
    3. Re:Jabber + SSL by Anonymous Coward · · Score: 0

      No, it wouldn't. They use trojan-like monitoring software which can watch the users' desktops in real-time. They wouldn't have a transcript in a tidy .txt file, but they could still see what you were saying.

    4. Re:Jabber + SSL by Anonymous Coward · · Score: 1, Insightful

      "but now it comes with VNC built in so from our server we can monitor the screen of any computer."

      This could sort of be like a house of mirrors. The watcher watching the watched watch the watcher. Or better yet, what happens when the student gets caught observing the principal perusing pr()n.

    5. Re:Jabber + SSL by Anonymous Coward · · Score: 1, Insightful

      The Trillian client also has built-in encryption which works with other ppl using trillian clients.

      But I trust in freeS/WAN and irc, it's still the best :)

    6. Re:Jabber + SSL by SealBeater · · Score: 2

      First thing I did, and try to do when I am at a new job, is to reinstall the OS of my workstations. Might not be a bad idea for others to consider.

      SealBeater

      --
      -- Its survival of the fittest...and we got the fucking guns!!!
    7. Re:Jabber + SSL by egommer · · Score: 1

      Jabber over SSL would solve this problem.

      Any type of encryption method worth it's salt would do the job. The main point is missed. Companies have the right to monitor thier communications.. It's a survival instinct. Key sniffers could be used to defeat any encrytion tactic. If ou speak on the phone, type an email, chat, or verbaly gossip you can be monitored at a companies discrestion. Not all companies will do this, just the ones that believe it's justified. Justified like a stock trading company, or a manufacturer of secret US Military Weapons, or even the bread baker who doesn't want you revealing his recipes to his competition. It's their choice not yours, that is, if you want to continue to get paid. If you use company bandwitdth and company computers then you have no right to privacy and never will. Bring in your own PC and use your own bandwidth if you want to deal in espianage, cover ups, or finding a date. With that being said. You can play the cat and mouse game at your own risk. Sometimes the mouse will win but the cat is very patient. I am a very big privacy advocate but only when I am paying for communication method out of my own pocket. Then I get pissed when people snoop.

      --
      Two Towers-Two Worlds.One seeks triumphs and freedom for man.The other deems man unworthy and wrecks them.
    8. Re:Jabber + SSL by Fulcrum+of+Evil · · Score: 2, Insightful

      That may get you in trouble with IT - they usually take a dim view of users reinstalling their workstations.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    9. Re:Jabber + SSL by Anonymous Coward · · Score: 0

      There is software for monitoring the users' desktops and keystrokes which is one of many tools that employers can use

      Use a program which understands dvorak, but doesn't actually change the keymap. It won't be very good encryption, but it might work with stupid bosses.

      Alternatively, find a way to connect your PDA to your computer, and use that.

    10. Re:Jabber + SSL by Anonymous Coward · · Score: 0

      Regardless of what service you use...if you use the Gaim client, you can find a variety of encryption plug-ins. Also, you can just write your own script, like this I use with my friends.

    11. Re:Jabber + SSL by gslinger · · Score: 0

      Which would get your ass fired at any number of companies. Quite reasonably so, if that system has been provided for you by corporate IT.

    12. Re:Jabber + SSL by Kallahar · · Score: 2

      Why does your school need to monitor the screens? To catch slackers? Just give them an F!

      On a related note, we had a student who installed a screen capture trojan on the other computers in our lab. We caught him when he was cheating at network Hearts with his classmates, but I'm sure he would have used it on tests to grab answers from classmates if we hadn't caught him. Unfortunately, the administration didn't comprehend just how dangerous this screen cap program was. Fortunately, one of the admin's was a student who did understand :)

    13. Re:Jabber + SSL by HalfWalker · · Score: 1

      No chance. We use standard system images, and users (as a general rule) do not have local admin rights (Winders 2K).

      Dean.

      --
      94TT :)
  2. As if we're not monitored enough by markdev · · Score: 0

    In this damn age of spyware everyone knows everyone elses business. Give it a rest boys.

  3. Silly Question... by Anonymous Coward · · Score: 0

    So why not encrypt the sessions?

  4. Alternate by NiftyNews · · Score: 4, Funny

    Ah, yet another story that makes me happy about my 50% purchase of CarrierPigeons.com!

    1. Re:Alternate by webloser · · Score: 1

      kewl, I can buy that domain for a measly $500

      ...piss can I borrow $500?

    2. Re:Alternate by 56ker · · Score: 1, Offtopic

      Sure Google won't be after your pigeons? ;o)

    3. Re:Alternate by linzeal · · Score: 1

      What is that 4 billion pesos/pounds ?

  5. Re:First Post by markdev · · Score: 0

    and you my friend are the biggest loser I have seen in months. idiot.

  6. The simplest thing to do... by danny256 · · Score: 0

    to keep from being monitered is to turn off the history logging, I know you can do this in ICQ, AIM and MSN. I know that when I'm at work I keep the ICQ history on but delete a lot of the offensive messages (about my boss) just in case.

    1. Re:The simplest thing to do... by finkployd · · Score: 2, Insightful

      That is fine, except all of the messages go over the network in cleartext.

      Finkployd

  7. Why not use on-the-fly encryption? by teamhasnoi · · Score: 2
    I'm gussing that most everything is sent plaintext over the network and there isn't a client that will do this as of yet, but I'm sure that some smart /.'er will figure one out, code one up, and bless all of work-a-day ameriKa with one.

    I really don't have to worry about this, since I'm the 'IT' guy at my company. hehehe

    1. Re:Why not use on-the-fly encryption? by Anonymous Coward · · Score: 1, Informative

      Licq includes the option to secure messages with SSL, and there was (is?) a pgp plugin for icq as well.

    2. Re:Why not use on-the-fly encryption? by arcanis · · Score: 2, Informative
      Fire.app for MacOSX can encrypt messages with GPG both ways transparently with arbitrarily sized keys.

      It also does on the fly language translation using a babelfish-quality replacement engine, so you can chat with people whose language you don't speak. It's very cool.

    3. Re:Why not use on-the-fly encryption? by jbf · · Score: 2

      Trillian supports "SecureIM" over ICQ. But whether or not it's actually secure has been debated on the forums...

    4. Re:Why not use on-the-fly encryption? by Anonymous Coward · · Score: 0

      I was kind of alarmed today, after I installed Trillian (trillian.cc) I came a cross a "view log" option, it automatically makes a log of your AIM conversations, thats kind of scary :0, but it does have an option to connect to an AIM "secure" server, that supports 128bit encryption. neato

    5. Re:Why not use on-the-fly encryption? by Anonymous Coward · · Score: 0

      I really don't have to worry about this, since I'm the 'IT' guy at my company. hehehe

      How does driving a motorcycle around the Isle of Man help?

    6. Re:Why not use on-the-fly encryption? by gorf · · Score: 1

      licq has supported SSL connections with other licq clients for eons. Jabber allows for end-to-end encryption and signing, and Gabber (a Jabber client) is at least one clients which supports this using gpg. On top of that connections to Jabber servers can be put down SSL.

    7. Re:Why not use on-the-fly encryption? by andersbd · · Score: 0

      If I understand it correctly, licq supports encrypted messaging.
      My friends are all Windows-users, so I haven't been able to try it...
      Does licq compile under Windows? (if so, I would use it those times I "have to" boot up in Windows for game-playing...)

  8. PLEASE MOD HIM DOWN AS OFF TOPIC by Anonymous Coward · · Score: 0

    These beowolf jokes are getting so LAME. You loser.

  9. Re:First Post by Anonymous Coward · · Score: 0

    Wake up, fool. Who's the loser? You are on /. trolling on a Saturday night. Or maybe it's Sunday morning where you are. If you weren't a loser, you'd be getting laid right now, or taking that morning walk home from the chick's house.

  10. Bosses... by 56ker · · Score: 1, Flamebait

    will spy on anyone if they think they can get away with it.

  11. Employees by interiot · · Score: 2

    will screw off on the internet if they think they can get away with it.

    1. Re:Employees by NoMoreNicksLeft · · Score: 2

      Which is bad, because they start to get uppity, and believe that they are anything more than faceless little cogs in a vast machine, that can be replaced at the whim of those in charge. I just don't understand why every other machine that a business can buy will work nonstop for weeks, even months at a time, with low maintenance... but these damn employees need breaks sometimes even more often than the every 4 hours mandated by law. Not to mention, having to actually pay them paychecks!

      Can you imagine that?
      *sarcasm off*

      Employers can't yet buy robots to do this stuff. They can't manage things well enough to keep a person even 70% busy most of the time. They refuse to allow telecommuting most of the time, so a person can't mix personal and work time very well, if at all. They have a choice, of letting that employee go crazy, and stare at a wall, for 3 hours out of every 8, and have high turnover, or they can provide minimal entertainment and/or look the other way when employees invent their own. Internet access costs them the same, whether or not they check espn.com every 20 minutes. If the employer is that RETARDED that they believe some measurable work would have been performed if internet access hadn't been available to the employee, then I don't even know what to say.

    2. Re:Employees by Anonymous Coward · · Score: 0

      So, you and this other employee have different conditions under which you work at an optimal pace. It doesn't make either one of you wrong.

      I actually have a problem with constant silence (or machine hum) at my workplace; it starts to get on my nerves after a while. A little quiet music relaxes me and helps me think, and I'm more productive under those circumstances. I do, however, make sure it doesn't distract any other employees.

    3. Re:Employees by The+Cat · · Score: 2

      Probably because they don't have anything to do, and the boss has been in all-day meetings for five weeks.

      I've seen people making $60/hour idle for four months before. If people are not busy, it is ONE HUNDRED PERCENT the fault of management.

  12. What's the problem? by Anonymous Coward · · Score: 0
    Every company I've worked for has a clause or policy "company computers are for company business blah blah blah". Standard policy is always "You consent to monitoring", this is absolutely required for security sanity.

    So who cares? If you think you're NOT being monitored you're just being dumb. Use encryption if you want to protect your privacy.

  13. do not bother if your users are as boring as mine by Anonymous Coward · · Score: 0

    monitoring a couple of days worth of internet messaging and seems people here are rather boring

    found out about one office affair learned that two employees are gay and saw one guy resist being lured into cybersex with a claimed 14-yo girl from penn

    next stop is hotmail web traffic

  14. The government... by Semi-Psychic+Nathan · · Score: 1

    will spy on the internet if they think they can get away with it.

    --
    I have nothing to allude to, and I am alluding to it.
  15. Why? by glwtta · · Score: 2

    Why would anyone be using any sort of instant messanger at work? I really am curious. Do these people have nothing better to be doing?

    --
    sic transit gloria mundi
    1. Re:Why? by Anonymous Coward · · Score: 0

      maybe they use it for work? My company has development offices all around the world and we use IM extensively.

    2. Re:Why? by Anonymous Coward · · Score: 0

      I hope you don't talk any trade secrets over IM...

    3. Re:Why? by Anonymous Coward · · Score: 0

      Welcome to Corporate America!

    4. Re:Why? by malevolence · · Score: 2, Informative

      Actually, it's pretty useful for getting answers to quick questions from colleagues. Instead of traipsing(sp?) down the hall or emailing the person, just IM them. Everyone at the office uses it and it has helped my productivity. I no longer get snagged into whatever is going on outside my office.

    5. Re:Why? by moronga · · Score: 1

      We use an in-house IM-like client at work and it's really useful for getting quick feedback.

      Typically, we'll use it if we want someone to run a test program or look at some screenshots. It's quicker than email, and easier than using the phone, where dictating a full *nix path could be difficult. The recipient can just paste the command into their shell.

      Also, it makes it really easy to get a lunch posse together. :)

    6. Re:Why? by ross.w · · Score: 4, Interesting

      Actually we use Lotus Sametime in our company quite a lot for instant messaging.

      Being a multi-national company, without this we would be spending a lot of money on international phone calls (although I believe we are looking at VOIP for this too)

      It also allows you to share your desktop so you can collaborate on a document. Sometimes we use a combination of the instant messenger and the phone for this.

      You can also see if the person you are trying to reach is at their desk before you try to reach them.

      It is less intrusive than a phone call and more immediate than email.

      --
      If my call is important, why am I talking to a recording?
    7. Re:Why? by DennyK · · Score: 3, Interesting

      Yes, but there's a large difference between ICQing a coworker to ask about a business-related issue and jabbering with your buddies on AIM for hours on end. One is a perfectly valid activity while working. The other is slacking off, and will probably get you in trouble. The solution is to avoid the second activity. Do you really care if your employer is recording the IM you sent to Joe down the hall asking if he knew the correct syntax for some obscure Perl command, or when the next meeting was scheduled for?

      The company I work for, for instance, uses an internal ICQ server and the corporate ICQ client for interoffice IM, and doesn't allow any other IM clients. This lets people communicate internally without a problem, but keeps them from wasting time on idle chats with outside friends.

      DennyK

    8. Re:Why? by garcia · · Score: 2

      you're joking right?

      I can name 12 people off the top of my head (of the 81 on my list) that use IM everyday while at work. Two of those people are parents that talk to their kids at school (one is my father).

      How much time at work do you really spend doing work? Unfortunatly for me I have a job where I am working no less than 95% of the time I am there. For other people I know this percentage is well under 66%

      It isn't that they had nothing better to be doing, it is just easy. Why not do it?

    9. Re:Why? by Anonymous Coward · · Score: 0
      Why would anyone be using any sort of instant messanger at work? I really am curious. Do these people have nothing better to be doing?


      Some of us work in companies with branches geographically placed upwards of 250 miles from each other. IRC has proved to be a very good and inexpensive solution to questions of the pop-your-head-in-the-door variety.
    10. Re:Why? by koekepeer · · Score: 1, Insightful

      > The other is slacking off, and will probably get
      > you in trouble.

      which is plain silly if you ask me. "slacking off" can be just the thing that makes you more relaxed during your workday, and being more relaxed makes it easier to perform well when you actually have to do something.

      i don't understand that a lot of managers still seem to think that the best way to increase efficiency is to shorten any "idle" time, and seem view the worker as a machine-like entity.

    11. Re:Why? by ez76 · · Score: 3, Informative

      Where I work, Yahoo! Messenger is the preferred means of exchanging short work-related messages.

      Unlike the phone or in-cube appearances, the recipient may respond when it is convenient for them (no interruption necessary if you have your message windows set to auto-minimize), but unlike e-mail, it's more interactive and conversational.

      It's also incredibly convenient to be able to cut and paste example code, command-lines, URLs, etc. to co-workers on the fly.

    12. Re:Why? by MavEtJu · · Score: 2

      Two of those people are parents that talk to their kids at school

      1. The father should do the work he's being paid for.
      2. The kid should pay attention to what the teacher is saying.

      --
      bash$ :(){ :|:&};:
    13. Re:Why? by linzeal · · Score: 1

      Exactly as a sysadmin/helpdesk person the amount of work you do is proportional to the amount of time you take to set things up right the first time. Besides upgrades and the occasional hardware issue there really isn't a lot to do here when I work (midnight to 9:00am)

    14. Re:Why? by EvlG · · Score: 2

      I'm glad that IM hasn't caught on at my employer. I would find it incredibly annoying to be distracted by IM popups every few minutes.

      At least with email there is the expectation that a response will come back in a a few hours, or by the end of the day. With IM, I'd be expected to respond within a few minutes. What a chore.

    15. Re:Why? by DennyK · · Score: 2

      I suppose it depends on the job you have. When I'm at my job, I'm expected to work, not goof off. I am "actually" doing something all the time. I can't recall any time since I've started working that there was nothing that I was supposed to be working on while I was clocked in. If I'm "slacking off" instead of doing it, then I'm not doing my job.

      Obviously, I don't work for eight hours straight. That's what breaks and lunches are for. Work a couple of hours, take a break, work a couple more hours, go eat lunch. On my break, I'll read a book, check Slashdot, whatever relaxes me. But I still don't do anything that I would get in trouble for if my employer found out, so they can keep logs of my web "surfing" during breaks if they want. I'm usually visiting sites that have a relevance to my field, anyway. I don't spend my break time posting company secrets to F*ckedCompany.com or griping about work over AIM, first because I have no desire to do so (I happen to like my job and the company I work for... ;) ), and second, even if I DID have the desire, doing that from my workstation at work would just be stupid.

      DennyK

    16. Re:Why? by The+Cat · · Score: 3, Insightful

      No. Mainly because nine times out of ten, management hasn't the foggiest idea what is going on from day to day. Oh sure, every once in a while there's some frantically organized flailing "initiative" complete with an announcement at an all-hands meeting, but by and large, management doesn't understand a single detail of the work in most companies.

      Then everyone gets laid off. Welcome to the workplace.

    17. Re:Why? by zook · · Score: 2
      I've heard this before, and I'm somehow amazed by it.

      Perhaps I don't understand the protocol well enough, but it seems to me that you're sending eachother messages from inside your network to Yahoo and back, all in the clear. I'm always creeped out by this with idle chatter, but with internal company information?

      Screw firing people for wasting time. If my employees were jeopardizing company data like this I'd have 'em out on their ear.

    18. Re:Why? by Anonymous Coward · · Score: 0

      Since I completed downloading every single pr0n file a few months back, what else am I gonna do?

    19. Re:Why? by Anonymous Coward · · Score: 0

      Why would anyone except a secretary need a word processor? Or anyone bar an accountant need a spreadsheet? Hell, why does anyone need a computer anyway?

    20. Re:Why? by ezs · · Score: 2, Informative
      Main reasons I use Trillian with my team

      • - instant 'are you online' status
      • - ideal for quick questions and answers

        - removes load from email systems (bandwidth, storage, backup)

        - it is instant. Ideal when taking part in a global con call and you want to check something offline

        - IM cuts down on the number of intl (or even national!) calls you need to make

      The main enhancements I can see corporates needing for this to become as mainstream as email are security, supportability, scalability, the ability to lockdown who can connect (ie internal only, external approved list etc) and centralised logging. It's certainly lessened the load on my email inbox and made me more productive. I work with a large team across the globe. I regularly use IM to answer real quick questions from colleagues in the Americas, Europe, South Africa and Asia.
      --
      Evil ZEN Scientist
    21. Re:Why? by Anonymous Coward · · Score: 0
      We use messaging as part of our inter-office communications - it's easier than picking up the phone and asking questions, it also means you have information in digital form that you can cut and paste without errors in transcription.

      That said, we don't record IM conversations, we simply don't think it's right to do that. The point of IM is that you have control over who listens in and participates. If people want to use it for adverse reasons - backstabbing and gossiping - fair enough, but they'll be weeded out in time, simply because using IM inproperly in a business environment is down to the person using it, not the technology at hand. Ditto for the time-wasting aspect - the user who chats endlessly on IM is probably someone who chats constantly round the water cooler, in the toilets, on the phone, etc. etc...

    22. Re:Why? by LinuxHam · · Score: 3, Informative

      I'm glad that IM hasn't caught on at my employer. I would find it incredibly annoying to be distracted by IM popups every few minutes

      Depending on your level of responsibility, it really doesn't work out to "every few minutes". I, too, use Sametime at work and it, like MSN and Jabber (I never tried any others) allows you to set your online status. So each employee has their contact list up with a little status indicator right next to the name. Green means available, Red means Away (which can be set to not auto-return), and there's a little "international NO symbol" which means "Do Not Disturb".

      I most recently used it to "feed lines" to my project manager while he was presenting to some big wigs in a meeting. He doesn't have time to know all the minutiae, so he would tread water on questions while I fed him better details. Luckily, I looked ahead into a presentation and saw some numbers were way off. I was able to warn him before he got to the page.

      Being a mobile employee means I have to go to many different customer sites (or work at home) all the time. For coworkers with whom I'd occasionally have conversations of a personal nature, I always "take it outside", and off Samtime onto MSN or AIM. The chances of ALL of the customer sites recording IM sessions will always be less than the 100% guarantee that my IM's will be recorded if I use the company Sametime server.

      --
      Intelligent Life on Earth
    23. Re:Why? by Anonymous Coward · · Score: 0

      You dont go to work to actually WORK do you ????
      >
      >
      What a WEIRDO

    24. Re:Why? by Anonymous Coward · · Score: 0

      Asking anyone who programs with a team of developers scattered around a building will most likely find you your answer. IM combines the best aspects of phone and e-mail in the work environment. I can get an immediate response, while pasting problem code into the window. IM at work is an invaluable tool.

    25. Re:Why? by Anonymous Coward · · Score: 0

      >Do these people have nothing better to be doing?

      like reading slashdot? HEH!

    26. Re:Why? by Anonymous Coward · · Score: 0

      I guess you don't have a job do you. It really comes in handy at work. When you get a job, you many find this out for yourself

    27. Re:Why? by Anonymous Coward · · Score: 0

      The father should do the work he's being paid for.

      Apparently he is, or he would have been fired.

    28. Re:Why? by Anonymous Coward · · Score: 0

      It's Sunday Foo'

    29. Re:Why? by Anonymous Coward · · Score: 0

      Yah. Sometimes you just dont feel like working.
      Its either AIM, or longdistance phone calls.

    30. Re:Why? by nullard · · Score: 1

      At my job we use IM for internal communication. I also let my non-coworker buddies reach me over IM. If one IMs me, I tell them that I'm at work, and I'll call them back on my break. It works better than having to check my voicemail and lets them send me simple announcements that don't require replies. It's really great for scheduling meetings with my friends.

      For example:

      What's up?

      I'm at work

      Ok, just wanted to let you know that we're going to the beach tonight to see a play - it's free for students

      Details?

      It's at such-and-such theater at such and such time

      ok. I'll see you there, save me a seat

      later

      --


      t'nera semordnilap
    31. Re:Why? by bnenning · · Score: 2
      Apparently he is, or he would have been fired.


      We have a winner. If an employee is doing his assigned work well, why should anyone care if he spends half an hour a day chatting on IM? In the Peter Principle there is a section that describes how good managers evaluate output while incompetent managers evaluate input; the latter seems to be the case for companies that obsess over every keystroke of their employees.

      --
      How to solve most of our problems: 1.Lots of nuclear plants. 2.Cure aging.
    32. Re:Why? by Asgard · · Score: 1

      'school' could be a college dormitory, in which case the student isn't missing anything.

  16. Easy to monitor by dcocos · · Score: 2, Informative

    Since the IM clients, as well as most other things you do at the office are so easy to monitor. I've always made it a personal policy not to discuss any thing over IM that I'd be embarassed to have to explain to a judge in court some day. And in case they were monitoring it I'd always add an "Hi Sysadmin, I know you are reading this" every once in while to my messages just to let them know I knew they were there ;)

  17. This kind of boss gets his own punishment by Provincialist · · Score: 3, Insightful
    I can see why a financial firm might decide it needs something like this, but in general if this sort of system is used in your workplace it's a symptom of far worse problems. If anyone, let alone a high-level manager or IT director, has the time to be concerned about, and then set up a monitoring system for, instant messaging, then the company is not receiving an adequate return on his salary. This monitoring software is the sort of ridiculous waste of resources for which any manager should be called on the carpet. As scores of others will observe, it is easily circumvented through client-side encryption. Companies that hire managers simultaneously so anal and so clueless are hauling around a lot of dead weight.

    Hopefully within a couple of years we'll get the cheerful news that these monitoring companies have gone belly-up.

    later,
    Jess

    --
    I am programmed for etiquette, not destruction!
    1. Re:This kind of boss gets his own punishment by Provincialist · · Score: 2, Insightful
      There is a skill called management, at which a small number of managers have attained proficiency, and that would entail having some idea what one's reports are doing. I don't mean knowing what they are doing every minute, but rather knowing that this week's tasks are being completed at an acceptable rate. Any employee who is worth access to a computer and all the costs that entails is capable of managing his time at least to the hour, or if not will quickly be found out without such a system.

      This system is a crutch, plain and simple. Effective managers "accept" an amazing number of things, so long as the job gets done.

      later,
      Jess

      --
      I am programmed for etiquette, not destruction!
    2. Re:This kind of boss gets his own punishment by q-soe · · Score: 2

      Yes and your'e not one

      I have 13 staff and a turnover rate of 0 in 2 years, 3 of my staff have worked for me in 2 jobs now. They know their internet and email are monitored and they accept it as the company has a AUP that all staff sign - I won't bend the rules for anyone - we all have to comply.

      Knowing this weeks tasks are being done is fine - understanding the costs of bandwidth usage and the other stuff plus the users who see it and whine that they don't have it.

      As for this "Any employee who is worth access to a computer and all the costs that entails is capable of managing his time at least to the hour, or if not will quickly be found out without such a system. " Oh my god - do you know how much porn and games we pull out of email systems every day - all of our staff in the company (some 1500) have a computer and email and without such a system they can easily cover it up.

      --
      I refuse to argue with Anonymous Cowards - if you want a discussion get an account....
    3. Re:This kind of boss gets his own punishment by TedCheshireAcad · · Score: 2

      When you're the omnipotent admin, however, you can bend the rules for yourself. After all, you're running the company, right?

      :-)

  18. You can use 'tethereal' for realtime AIM decodes by Nonesuch · · Score: 2
    FYI, the Ethereal sniffer package includes a decoder module for AOL Instant Messenger traffic.

    The text-interface equivalent is 'tethereal', which provides realtime decoding of AIM messaging traffic, and supports logging raw packets to a file.

    One of the most common ways for AIM to work through a firewall is by pretending to be a SSL connection to the AOL 'oscar' server, and tunnel through a HTTP/SSL proxy. But in reality, that session is still cleartext, easily intercepted.

    I am not sure if any similar software currently exists for MSN, Yahoo or ICQ. IRC is trivial, and Jabber's XML doesn't take much to extract to human readable dumps.

    Even Jabber's SSL support only offers minimal protection, as (despite repeated requests to have the feature added) none of the Jabber client software implementations include any checking of the server certificate, so all Jabber clients are vulnerable to 'man in the middle' attacks.

  19. simple solution by ross.w · · Score: 4, Informative

    Use SSH link to your PC at home to run text based IM client and/or web browser from your home address.

    I've not heard of an employer that monitors Port 22, and even if they did, it's encrypted so they can't pick up what you said.

    Best program for this is PuTTY (assuming you use NT at work)

    The whole thing assumes you are using *n?x at home and can run an SSH daemon on it.

    OF course best of all is to not shout from the rooftops what should be said in private.

    --
    If my call is important, why am I talking to a recording?
    1. Re:simple solution by Nonesuch · · Score: 5, Insightful
      IMHO, a 'good employer' does not bother to look unless the employee causes some other problem. The one case I had dealt with was related to using IRC from the office, and the abuser was fired that same day.

      I've not heard of an employer that monitors Port 22, and even if they did, it's encrypted so they can't pick up what you said.
      Every corporate site I have been at, will block port 22 outbound.
      Best program for this is PuTTY (assuming you use NT at work)
      If your employer is nosy enough to be sniffing your IM sessions, they are probably also nosy enough to install LanDesk and/or other software on the desktop for remote screen viewing, keystroke logging, etc.
      The whole thing assumes you are using *n?x at home and can run an SSH daemon on it.
      People that clueful generally have better things to do with their time than instant messaging.

      (Says the guy posting to slashdot in the middle of the night)

    2. Re:simple solution by jesser · · Score: 1

      The whole thing assumes you are using *n?x at home

      I hope you use kleenex at home when your nose is runny...

      --
      The shareholder is always right.
    3. Re:simple solution by Anonymous Coward · · Score: 0

      My company doesn't (yet) block port 22, but I'm fairly certain they keylog my sessions. So I use One-Time Passwords... probably pisses somebody off, but oh well. I'm sure those NT admins are too lazy to really do anything about it - I don't mind that they read my crap, I just don't want them logging into my home computer!

    4. Re:simple solution by bmetz · · Score: 3, Insightful

      I work for a very large computer company and I know for a fact they don't block ssh. I think that if you go to the big computer companies they know their employees are very adept at these things. I could tunnel SSH through DNS if I needed to -- so why even bother getting in my way.

      Also, I don't know how the we're-too-cool-for-IM crowd is doing things but in MY software team our internal IM client is very essential for development collaboration. Unless you live in your own little world never speaking to anyone it's a very major tool for tracking people down to ask questions/fix bugs/etc.

      --
      What did you eat today? http://www.atetoday.com/
    5. Re:simple solution by Bartab · · Score: 1

      Every corporate site I have been at, will block port 22 outbound.

      I've never encountered this, and even when I'm in the position of power to cause this to happen it has never come up as a desired reality.

      Besides, anybody smart enough to have a SSH server up (which is pretty limited if you think about it) is smart enough to put it on a different port. Say, 29747, or perhaps 12948, maybe even 80.

      --
      Any sufficiently advanced technology is indistinguishable from a rigged demo.
    6. Re:simple solution by 0x0d0a · · Score: 1

      I've been really irritated by this for some time. Okay, I can vaguely understand blocking port 22 inbound for security reasons. You don't want any chance of someone getting into a poorly set up system that's also running ssh.

      But why do employers block 22 outbound? It's really annoying. You're more likely to use ssh for work than any other protocol I can think of.

      A guy I know worked at a site where ssh outbound was blocked, but telnet outbound was allowed (he ended up running ssh on the telnet port on his box to avoid this). I just don't see the logic behind these decisions -- how is allowing telnet but disallowing ssh security-tightening?

      I see the practical value of firewalls -- most systems (esp. Windows boxes) are a PITA to administer remotely and en mass. I still don't like them.

    7. Re:simple solution by q-soe · · Score: 3, Informative

      Yes we block it
      Yes we block IM
      Yes we block AIM
      Yes you get fired if you break the rules

      When you start work with us you sign an agreement which clearly states what is and isn't allowed - the shock comes about for most people when we enforce that agreement - and we do.

      The employer pays you to work, there are NO work reasons (cut the crap about tech support IRC and suchlike - i've heard it and seen what these guys talk about - there's no tech support going on at all - its chatting) for IM clients that i can see other than wasting time.

      --
      I refuse to argue with Anonymous Cowards - if you want a discussion get an account....
    8. Re:simple solution by Anonymous Coward · · Score: 0
      • I've not heard of an employer that monitors Port 22, and even if they did, it's encrypted so they can't pick up what you said.

      My employer monitors Port 22 and if you use it, you get a nasty email requesting what your business use of Port 22 was.

    9. Re:simple solution by Stiletto · · Score: 4, Insightful


      That's a slippery slope...

      You might expect employees to clock in in the morning, think and do nothing but work, have no stray thoughts, don't get up to eat, drink, or talk, and then clock out at night, without any second wasted... It's called a robot. Look in to hiring one instead of a human being.

      I don't think I've ever met a collegue that could perform up to that standard.

      You need distractions every once in a while to maintain your creativity.

    10. Re:simple solution by Anonymous Coward · · Score: 0

      Cool.
      With an attitude like that you'll probably deserve to get those lazy bastards kicked off anyway.

    11. Re:simple solution by mjh · · Score: 2

      I have worked for two different banks, both of which blocked everything, including 22. They then set up proxies which would allow 80 & 443 out to the world, monitored by proxy authentication.

      The reason that blocking port 22 is so important is that SSH enables trivial tunneling. This will allow anyone in the corporation who runs outbound ssh to determine what the corporations inbound security policy is. Or translated from business-speak to techno-speak: those who run ssh are allowed to let any TCP port back into the corporation.

      Breaking the firewall policy is not something that large corporations, especially banks, are fond of.

      Of course, the fact that you can tunnel tthrough firewalls on port 80 and port 443 does not sit easily with these type of corporations.

      --
      Key to financial independence: Spend less than you earn. Save and invest the difference. Do it for a long time.
    12. Re:simple solution by bastion_xx · · Score: 1

      Hrmm. It's good to have policies that reflect your corporate culture.

      Where we work, IM is a key resource. An internal Messenger server (Exchange) accessible only from the LAN/VPN.

      Who uses it? Well at the bottom we have CSR's and general accounting staff. At the top there's the CEO, COO, CFO, and our VP of Technology and Integration (CTO). And it's a great way to contact the "higher-ups" without the crap.

      The most enjoyable use? Sniping others on day -long con-calls....

      --- Bastion

    13. Re:simple solution by whovian · · Score: 1

      You need distractions every once in a while to maintain your creativity

      Not only that, but also maintain your sanity.

      Besides, there are sometimes errands that you have to do or that suddenly come up during business hours. A 2 pm virtual booty call: no. Being called by your spouse to pick up the kids because s/he suddenly can't: yes. Any reasonable employer should allow these things within reason.

      --
      To-do List: Receive telemarketing call during a tornado warning. Check.
    14. Re:simple solution by Anonymous Coward · · Score: 1, Interesting

      Well, you sound as fun as a barrel of monkeys.

      You are also misinformed and/or close-minded about IM having legitimate uses.

      For your information, I've been at a client that REQUIRED it's people to sign up with AIM, and put on the company buddy list - there were two offices, and also a deaf programmer. Everyone having AIM greatly facilitated the work processes.

      The client I'm at now also has some part-time contractors that I can get quicker responses out of on IM than I would on the phone.

      Saying IM has no place in the workplace is about as forward-thinking as someone in the 80's saying email has no business purpose.

      And I'd rather starve than work for a company like yours. When people are fretting over things like "company policy" and dress codes and spying on their employees it either shows that they are gasping their last breath of desperation to keep their heads above water, or else it shows that they are incompetent tyrannical jackasses with not a clue about how real management is done. Neither one is a professional environment.

      Thanks for your input, though.

    15. Re:simple solution by anthony_dipierro · · Score: 2

      When you start work with us you sign an agreement which clearly states what is and isn't allowed - the shock comes about for most people when we enforce that agreement - and we do.

      I respect that. I'd much rather have my company spell out what is and isn't allowed rather than just disallow everything and then enforce at their leisure.

      That said, I probably wouldn't work for your company. I'm paid to do a job, not to sit a desk for X hours. If you're going to force me to do that job for a certain amount of time, in a certain place, in a certain way, I'm not an exempt employee, and you are required by law to pay me hourly, and pay 150% for every hour over 40 a week.

    16. Re:simple solution by Anonymous Coward · · Score: 0

      Fine and dandy. You'd have to pay me twice as much as the other company that turned a blind eye to it as long as I got my work done.

    17. Re:simple solution by phoneboy · · Score: 2

      Some companies block SSH out, some don't. Where I work, all outbound Internet access is done via proxy servers. The SSH proxy doesn't allow any form of port redirection. Of course, this does not stop someone from using something like HTTPTunnel through the web proxy, but...

      -- PhoneBoy

      --
      The views expressed herein are not necessarily those of anyone, including the poster.
    18. Re:simple solution by kapella · · Score: 1

      We have one of those at my company too. The company even went all-out and bought instant messaging appliances for everyone's desktop. Really quite slick.

      It's got a 12-button keypad and a receiver on it. Sound familiar?

    19. Re:simple solution by SuiteSisterMary · · Score: 2

      Of course; but when the employees get unreasonable, the employers get unreasonable. If your company suddenly starts blocking Hotmail, for example, go find the person who just HAD TO INSTALL the 'fun new screensaver!' a 'friend' sent them, and infected the network. If your company suddenly cracks down on IMs, go find the person who has ICQ, and AOLIM, AND(!) MSIM all open and running, all day long. I've seen it, myself.

      --
      Vintage computer games and RPG books available. Email me if you're interested.
    20. Re:simple solution by Anonymous Coward · · Score: 0
      cut the crap about tech support IRC

      I often jump on to openprojects or dalnet if I have a linux problem I cant solve. I also hang around long enough and try to solve a couple of others peoples problems to make sure my personal karma doesnt take a beating when someone helps me solve my problem.

      Your companies policies sounds unpleasant. IT is overhead, so any crap IT pulls hits the productive workers overhead and hence rates. IT exists for no other reason than to increase productivity and efficiency for the billing employees. If you are making people unproductive because of unpleasant firewall policies then you have failed.

    21. Re:simple solution by q-soe · · Score: 2

      That would be true if i was a nazi but i'm note. I encourage my guys to have fun, if you don't have fun at work then why be there.

      The rules in the AUP were written by the company and my bosses, the 4 regional CIO's and the Global CIO - i did'nt write them but it's my job to see they are followed.

      That being said anyone who equates blocking IM with encouraging slavery has other problems - its software for god sake not thought. We allow access to the web with very little monitoring, we allow unlimited email providing the content doesn't get out of hand (we filter it)

      We tell jokes, have fun, party togethere and my guys are always able to speak up to me - i encourage them to challenge me as a manager every day.

      Rules are rules - if you agree to them when you get a paycheck then thats that, companies set the rules and if you want to work for company A you abide by their rules - thats the workforce.

      --
      I refuse to argue with Anonymous Cowards - if you want a discussion get an account....
    22. Re:simple solution by q-soe · · Score: 2

      Id rather talk to someone who has the balls to post as a name not anonymous.

      I dont set the rules for the 500th time - the company does and the do it for good reasons.

      We ran internal IM servers for over 2 years - when we looked at the traffic earlier this year we found about 1% work related stuff - thats after 2 sexual harrasment suits in which IM harrasment was named.

      We stopped it as people clearly cannot be trusted to use common sense - this in a company where the average wages is $50'000 k and 80% of staff have a university degree.

      See you work for an IT company - likely a company in the business of software development - i don't we are a services based business. IT companies has a reasonable expectation that their staff are intelligent enough to know their limits - we don't have that luxury and after lawsuits we don't have the patience.

      The company culture is one of proffesionalism - it's a suit and tie workplace where the customer is our most important assett, the company doesn't monitor dress code (you don't follow it subtle peer pressure will pull you into line), they don't spy on employees (we just don't allow IM and we strip .mov and some other attachments for legal reasons (afformentioned lawsuits included exposure to pornography in the workplace)

      The company has a reputation as being the most porffesional and succefull in our business feild world wide - and they made a decision at global level (we have some 15'000 employees) to formulate policies and apply them - us as IT Managers enforce these - thats the job you take on when you are a manager - something i doubt you have ever been

      Thanks for your comment - but please next time - use a username and i will listen to what you say without dismissing it out of hane -anonymous opinion is worth the same as free advice.

      --
      I refuse to argue with Anonymous Cowards - if you want a discussion get an account....
    23. Re:simple solution by q-soe · · Score: 2

      No i would not employ you - if you go into any job interview unprepared to sign a AUP or Policy on Corporate systems usage then you won't get a job with a modern corporation - they all have them.

      And anyway in my mind if you are the sort of person who needs IM or they don't work then i would be paying you a lot less than double - thats asking an employer to pay you more for actually doing the job they hired you for

      --
      I refuse to argue with Anonymous Cowards - if you want a discussion get an account....
    24. Re:simple solution by Anonymous Coward · · Score: 0

      Some good points, and yes, apparently, we work in different environments. Personally, I've tried to dodge really big corporation settings for most of my career because of all the silliness that goes on in them...in smaller workplaces, most people are mature enough to regulate themselves, IMHO - in big companies, too many folks can slip through the cracks and try to jerk off on the job. At least, that has been my experience, but I've only been out there for about 8-10 years, if you count workstudy and co-ops. I don't want to work with jerkoffs, and I certainly don't want to work at a place that has formulated policies to try to fit 15,000 different people worldwide.

      But....you are confusing conformity with professionalism. I suggest you read Peopleware if you think the two are the same...a suit and tie is not real professionalism. Sometimes the two intersect, but one does not necessarily follow the other. Again, I point you to Peopleware. One other book I'd recommend, but haven't read it yet, so it wouldn't be fair is "Slack", also written by Tom DeMarco.

      And yes, I understand you didn't write the rules. If it works for you, more power to ya, but I reiterate, I would not work at such a place if I could help it.

      Cheers

    25. Re:simple solution by q-soe · · Score: 2

      I agree with you on the big corporates - too many people can drop thru the cracks - we would prefer not to monitor as frankly it's a pain in the butt with logs and cleaning out quarantined stuff, i don't 100% agree with the policy but i have to enforce it - farnkly at times it's a pain.

      Im lucky that i have good guys.

      I have read Peopleware - the suit is only part of this company - we deal in big dollar value transactions and the company used to be a partnership - so the dress code is a hangover from that - plus when a client is spending $100 million with you they expect you to dress like that.

      We drive proffesionalism in many ways, we ecnourgae people to study, to conbtribute (many of our staff write white papers and industry articles without being encouraged) we encourage staff to recruit people themselves - if they know someone good then recommend them. The company credo is simply to be proffesional in all dealings at all times - be ethical and honest and make commitments to clients and deliver.

      Unfortuntely some people abuse it and we end up with policies like this, it hurts.

      I understand you wouldn't like to work here, hell i can see what you mean - the thing is i think that this setup would not work for an IT company (we're not one) and for programming which IMHO by defenition has to be more flexible and open. We have legislative and legal controls on us and procedures to follow.

      The thing is that as a SUpport Tech when you want to take the next step up in management you eventually have to work for a large corporate.

      This one's actually really good, excellent pay, great work environment and a lot of extras - we give all of our staff open net access, we give them all speakers on their desks and install winamp (they can't donwload MP3's but they can bring in their own) , i have a boardroom here with surround sound, 12foot screen and DLP prohector where we run DVD's every friday afternoon - drinks are for all and free with a full bar, and the list goes on

      We simply ask people to follow some simple rules and you know, no one has ever complained about them as they are really common sense.

      --
      I refuse to argue with Anonymous Cowards - if you want a discussion get an account....
    26. Re:simple solution by Anonymous Coward · · Score: 0

      Obviously your 'porffesional' attitude does not extend to spell checking.

    27. Re:simple solution by q-soe · · Score: 2

      my spelling sucks - i live with it - i spell check everythig i write for print etc but when i write a post i don't

      BTW i know this might be important to you but IMHO picking on spelling and grammar is pedantic from someone who posts as an Anonymous Coward

      --
      I refuse to argue with Anonymous Cowards - if you want a discussion get an account....
    28. Re:simple solution by dublin · · Score: 2

      The employer pays you to work, there are NO work reasons (cut the crap about tech support IRC and suchlike - i've heard it and seen what these guys talk about - there's no tech support going on at all - its chatting) for IM clients that i can see other than wasting time.

      Two things:

      1) It's the company's netowrk, they bought it, built it, and paid for it for the good of the company. They can allow or disallow anything they want, any time they want, for any reason or no reason.

      2) I've never seen a "legitimate" use for chat/IM. Typically, it is used simply to continue one's social life (usually miserably dreary) through the workday without raising so many eyebrows as several calls an hour would. Chat and IM area blight upon the Internet - personally, I'm in favor of blocking this crap everywhere, not just at work. (I have observed a striking, nearly 1:1 correlation: People who use IM are more likely to claim things they cannot really do or deliver on - they will then use IM as a crutch to attempt to leech the knowledge of others rather than simply learning for themselves. Top producers (whether coders, designers, or marketing folks) NEVER use IM. The correlation is nearly perfect. I don't know why...

      --
      "The future's good and the present is nothing to sneeze at." - Roblimo's last ./ post
    29. Re:simple solution by Godeke · · Score: 2

      I find your attitude interesting. I work in a geographically distributed team and we do 90% of our conversations in IM. E-mail is too slow, and telephone too intrusive to ask the trivial questions that come up all day during software development. Perhaps we are more mature, or perhaps we are boring as all get out, but we almost never have anything unrelated to programming to discuss via IM.

      Maybe a bigger issue you have (if you truly hire programmers) is to hire professionals who are on task without a whip and chain. With our programmers working from several states, we rely on output to determine of someone is slacking or not. If output suddenly drops and I didn't have a day filled with technical questions about the troublesome area, I know somethings up. But arguing that IM is useless except for wasting time is an luddute argument. Perhaps e-mail should be blocked too? They could be using it send jokes. Maybe the water cooler should be removed... someone might get the idea they could have a conversation!

      --
      Sig under construction since 1998.
    30. Re:simple solution by e2d2 · · Score: 1

      You are mad. Who are these Top Producers and how do you motivate them? "YOU WORK YOU NO TALK!"

      My favorite part of the post is where you take a scientific voice "I have observed a striking, nearly 1:1 correlation:...the correlation is nearly perfect"

      Funny, It almost sounds like you know something we don't. Have you been running experiments tracking the effect of IM on productivity in the workplace? Your "facts" are merely opinions based on corn, or as the native americans called it..maize.

      Basically you are saying that this particular method of communication is worse than others, which is not even worth commenting on, BUT also that developers should know it all when they enter the door. Maybe take their books and help files away, they are leeching information from them. Better block access to the web, they could be posting to forums. And dont forget NNTP, we know how bad those newsgroups are. Im sorry but this is just sad :(

      The fact is, As we are expected to devote larger and larger portions of our life to work we try to maintain our sanity by taking breaks, chatting (IRC btw can be great source of dev info), Instant Message and produce. If my production is slacking put the blame where it belongs, on me. Not on IM.

      "Top producers (whether coders, designers, or marketing folks) NEVER use IM" - you see yourself as a "top producer" obviously.

      "one's social life (usually miserably dreary)" - condescendingly looking at others social life as miserable?

    31. Re:simple solution by TheTomcat · · Score: 2

      Every corporate site I have been at, will block port 22 outbound.

      Most, however, don't block gopher, and it's pretty easy to set up sshd to listen on port 70.

      S

  20. Why not use Trillian? by Anonymous Coward · · Score: 1, Interesting

    Trillian has support for encryption. I believe that they call it SecureIM. Now I can't attest to its strength, but it sure seems like it would be better than plaintext being sent over the net.

    1. Re:Why not use Trillian? by dotderf · · Score: 1

      It uses 128-bit Blowfish. I'm not sure about the key exchange.

    2. Re:Why not use Trillian? by Anonymous Coward · · Score: 0

      As soon as you enable SecureIM in Trillian, your AIM connection becomes flakey. This is because AOL is able to detect that you are using an unauthorized client...

    3. Re:Why not use Trillian? by Anonymous Coward · · Score: 0

      I've never encountered any flakiness due to having SecureIM enabled. Maybe AOL just hates you ;)

  21. encrypt encrypt ENCRYPT!!! by Anonymous Coward · · Score: 0


    ENCRYPT. CRYPTEN ENCYPRT CIPHER TEXT DECIPHER
    CRYPT ENCRIPHER DECIPHER
    ENCRYPT.

    OVER.

    If you dont encrypt your regular messages, when you do encrypt it will be suspicious. By regular public using encryption, it eables those who need to use it to be safe. So even if you dont need encryption and dont value privacy, if you believe that sometimes individuals do need privacy .. then you should use encryption.

  22. Re:do not bother if your users are as boring as mi by Provincialist · · Score: 1
    You're being paid for this?

    I don't who should be more ashamed, you or your employer.

    --
    I am programmed for etiquette, not destruction!
  23. Companies have AUPs for a reason by Zeddicus_Z · · Score: 4, Insightful

    People think Instant Messages are like phone conversations - no record is kept, they can say pretty much what they like. People used to think the same about Corporate email too.

    Nearly every company today has an Internet Acceptable Use Policy. Said policy covers allowed surfing habits (work related only, etc), as well as appropriate email useage (no sexist jokes, spamming of jokes). Once companies realise that IM traffic is essentially the same as email, they will need to incorporate policy on usage into their existing AUP.

    Naturally there's privacy concerns here. People don't like their every word and action at work scruitinized. However, as Pamela Housley (director of compliance at Thomas Weisel Partners investment banking firm) said in the CNN article,'It's just easier to archive it all. I don't have the manpower to have somebody look at this all day long.' This will hold true in most cases.

    Most companies already archive all email sent/received by work accounts as a matter of course. However, that's not to say people actually read all those emails. They're there with the sole intent of keeping a record to cover the company's ass if something goes wrong - such as a client accusing an employee of doing something they were not asked to do. If said employee can turn around and say 'I was asked to do it via email, and HERE IT IS!', the company is fine.

    Face it - IM traffic sent/received at work will end up being logged as a matter of course. It has to if companies want to keep themselves out of a legal quagmire. However, just because your communication via IM is logged, doesn't mean someone is going to actually violate your privacy by reading it. In fact, most AUPs specifically prohibit the reading of another's work communications without the proper authorisation.

    Keep in mind that you're using work assets. Keep in mind that you can, and will, be held responsible for abuse of said assets. Stick to the AUP, and everything will be rosy.

    --
    Janie took my gun...
    1. Re:Companies have AUPs for a reason by Pituritus+Ani · · Score: 1
      Face it - IM traffic sent/received at work will end up being logged as a matter of course. It has to if companies want to keep themselves out of a legal quagmire.

      This is a double edged sword--if the company keeps all those logs, now they have to produce them upon subpoena. It would be less of a quagmire to be able to truthfully say they don't keep logs to begin with.

      --

      Another proud carrier of the $rtbl flag

  24. Why would a company NOT ban IM? by Nonesuch · · Score: 3, Interesting
    Why would anyone be using any sort of instant messanger at work? I really am curious. Do these people have nothing better to be doing?
    There might be a 'business case' for supporting IM at work, but just about every study I have seen admits that 80% of messaging done at work is non-work-related.

    Generally slackers will abuse IM just like they will abuse 'free' phone calls -- to stay in touch with friends and family, make plans to go out after work, or just idle chat.

    It can be difficult to implement a technical ban on instant messaging, webmail, etc. There are two many different services using different protocols and different servers to easily create firewall or filter rules to block them all.

    AOL Instant Messenger is an interesting example. The AIM client is very persistent in trying to establish connectivity with their servers. First it tries the 'official' OSCAR protocol on port 5190, but if that fails, it tries a high port, and also FTP, SSL, and other protocols that many firewalls permit unrestricted outbound client access.

    1. Re:Why would a company NOT ban IM? by York+the+Mysterious · · Score: 2, Insightful

      Tip for blocking AIM on Windows. Deploy all your computers with login.oscar.com in the hostfile and have it point to 127.0.0.1. This is what I have done for my school and it pretty much kills AIM. That or make a static entry in your DNS server that points to some bogus address. There's way to deal with AOL. It is quite good at getting past firewalls, but there are still ways...

      --

      Tim Smith - Ramblings from Nerd Land
  25. ;-) is all you need. by XBL · · Score: 4, Funny

    After every questionable comment you might make in a message just put ;-). Problem solved.

    For real though, I really don't care if people see my IMs. 99% of it is just jibber-jabber anyway, so who cares.

    If your are dumb enough to write messages like "My boss is an asshole" over IM, then that is your own fault if your get busted. ;-)

    1. Re:;-) is all you need. by Anonymous Coward · · Score: 0

      If your are dumb enough to write messages like "My boss is an asshole" over IM, then that is your own fault if your get busted.

      If my boss is dumb enough to fire me because I write "My boss is an asshole" on IM, then I don't want to work there anyway.

      I usually write a nice long rant about how I hate my boss over IM when I first start a job with a new company. This way if my IMs are being monitored, I'll get fired right away, and don't have to worry about working there.

  26. Jabber + SSL is almost worthless. by Anonymous Coward · · Score: 2, Informative
    Jabber over SSL would solve this problem.
    You'd think it would.
    But you would be wrong.


    The problem is that none of the Jabber clients implement the SSL protocol fully, and are vulnerable to 'man in the middle' attacks. They do not take the most basic precautions that you would find in any web browser (except Lynx, Lynx has this problem too).

    I explained the vulnerability in a presentation at JabberCon 2001, and the client developers have still not taken the basic step of including some mechanism for validating the server certificate, much less added support for client certificates.

    Jabber is interesting, and perhaps an improvement over other IM protocols, but the security is only halfway there.

    1. Re:Jabber + SSL is almost worthless. by 0x0d0a · · Score: 1

      Oh, christ. No one at work is going to be setting up elaborate forwarding systems for man-in-the-middle attacks. IT people do not have time for this kind of crap -- they have work to do. Running a packet logger is one thing, this entirely different

      Now, perhaps it means that Jabber isn't the best thing to, say, use as a defense communication network, but it's a lot better than anything else out there. I'd feel comfortable using it to send critical business messages.

      SSL is kind of overrated (good, and I happily SSL tunnel what I can, just the need for it is overrated). People agonize about submitting semi-sensitive forms in a web browser over a non-SSL connection. No one steals credit cards by packet sniffing. Much easier and more profitable in almost more cases to find someone that hasn't secured their CC/customer database. Packet sniffing is, in almost all real-world issues, limited to plain text attacks. It's really entertaining to see Bob down the hall in a cybersex MUSH or Mike sending long personal unencrypted emails, maybe, but unless you're a hardened hacker that's absolutely determined to get some information or into some system and there's *no* alternative, you're not going to bother with anything but plaintext.

      Besides, Jabber can PGP-sign and encrypt data. That's more than enough for me, since I trust PGP more than I do SSL.

    2. Re:Jabber + SSL is almost worthless. by Bronster · · Score: 3, Interesting

      No one at work is going to be setting up elaborate forwarding systems for man-in-the-middle attacks.

      You run into the script-kiddie fallacy here. Nobody is going to go to all the effort to find out what services I'm running on my machine, then look up all the possible exploits on the internet and patiently try each one. Of course not, they're going to download a script kiddie tool that scans entire netblocks and systematically tries all known exploits.

      Similarly, companies are going to install 'snoop plugin for NT-firewall/proxy', and automatically snoop. I doubt they wrote the firewall modules they're currently using to snoop IM's, and installing a 'SSL proxy' doesn't take any more effort, just one unscrupulous software developer to produce and sell the plugin.

      Of course nobody will bother unless there's enough people using the protocol you're using to sell that plugin - so find an unknown protocol and you'll be (relatively) safe.

  27. IM Use at Work by Renraku · · Score: 2, Insightful

    IM use at work should be monitored only if sensitive information could possibly get out through that route. But if you're going to monitor IMs, why not monitor email, phone usage, have searches upon arival and leaving, and so on? I used AIM when I had a job to communicate and plan stuff mostly, of course I used it for friendly chatting as well, but tech supporting is autonomous to me.

    --
    Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
    1. Re:IM Use at Work by cheezehead · · Score: 1

      ...why not monitor email, phone usage, have searches upon arival and leaving...

      Monitoring email is legal as far as I know, but there are laws against monitoring phone usage (at least external calls), and searches are a grey area. I know of military contractors that check briefcases for storage media, then again, I also know of military contractors that allow employees to do remote logins from home using encrypted lines.

      At least, that's the best of my knowledge...

      --

      MSN 8: Now Microsoft even has bugs in their ad campaigns.

    2. Re:IM Use at Work by treat · · Score: 2
      if you're going to monitor IMs, why not monitor email, phone usage, have searches upon arival and leaving, and so on?

      This is pretty standard. Most large corporations monitor email, search people randomly (and sometimes always) on arrival and leaving. All monitor phonecalls if they feel like it, but rarely record every conversation simply because of the effort involved.

      You've never worked for an employer that searched you upon arrival and leaving?

    3. Re:IM Use at Work by Renraku · · Score: 1

      Nope. I'm just 19, and there aren't many good tech jobs that don't require a BS and 10+ years of experience in the Knoxville area. Nor are there many open jobs where I'd have access to sensitive information and a computer. Ironically, I got fired from my last job for posting a theory on a message board that they must have been selling email addresses because of the spam I got when I signed up with them as my ISP. Won't go into details, its been posted before, but they sure wanted to keep that under wraps...

      --
      Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
  28. Jabber Intranet by XBL · · Score: 2

    One solution could be to just setup jabberd (on any machine) to run on *only* your local network. Very easy to do.

  29. Re:Encryption requires too much effort these days by Anonymous Coward · · Score: 0
    who have been using Linux since 1992,

    hahahahahahaha! Lunix hasn't been aorudn for tha t long opens ores is so much older! You gdool! Necty your going to tlle me you are the at commie bvatsard rucgard stallman!


    in case uou cant tll from this post thi ng i drank too mucha. grr whut do the keys keeping mvivng like this?

  30. encrypting won't stop you from getting in trouble. by garcia · · Score: 3, Interesting

    just b/c you encrypt your convo's does NOT mean you will not get in trouble for what you say.

    I seriously suggest that anyone who IMs at work should stop. If you know your company monitors email, etc, I could only imagine that you encrypting your sessions would raise their suspicions even higher.

    If you are that worried that you feel you should have to encrypt, you probably shouldn't be doing it at all.

    Just my worthless .02

  31. Tunnelling by drbyte · · Score: 2, Interesting

    I would think that tunnelling via SSH would solve most of the problems.

    I currently SSH tunnel for IRC, but for IM related software, I can't seem to SSH tunnel and get the relevant ports forwarded.

    Anyone have a good idea for doing this?

    But I'd think that my IRC connections are rather well encrypted.

    1. Re:Tunnelling by Anonymous Coward · · Score: 0

      I think that you blow goats.

  32. I consider the instant transcript a "feature" by phoneboy · · Score: 4, Informative

    First of all, the only reason I use IM these days is for work-related purposes with co-workers on an internal Jabber server. Okay, we do our share of chatting that's not exactly work-related, but who doesn't have f2f conversations with people at work about things that have nothing to do with work?

    In any case, why I consider the instant transcript a "feature" is because my co-workers and I do tech support. We talk to each other frequently about customer issues. These transcripts often contain useful troubleshooting information. It seems awfully silly to type something more than once, so once a conversation is done, it's copied straight from Jabber into a case note. We usually do not make those kinds of notes viewable to customers, but they are good for internal documentation.

    For those of you who have issues with your employer "snooping" on what you're doing, I would not expect any sort of privacy with respect to your computer usage at work. However, your employer needs to tell you your computer usage is subject to monitoring. Employers who fail to notify employees of monitoring are subject to serious trouble if they decide to take advantage of any information they find out as a result.

    -- PhoneBoy

    --
    The views expressed herein are not necessarily those of anyone, including the poster.
  33. I still don't get this.... by Peridriga · · Score: 5, Insightful

    Privacy at the work place...

    You are in a building that you don't own..
    You are sitting in a chair that you don't own
    You are using a computer that you don't own
    You are using a network that you don't own
    You are using bandwidth that you don't own

    Why do you have any expectation of privacy?

    It's simply a given.... If I am talking on my cell phone in the middle of the IT department I have no expectation of privacy...
    If I am 'yelling' my conversations over the network why do I have expectation of privacy...

    If I want to chat personally or sell company secrets I will do it at my home where I DO have privacy... But, not at work

    1. Re:I still don't get this.... by zerblat · · Score: 1

      Do you also expect your phone at work to be wire-tapped? Is it really unreasonable to expect your employer to have at least enough trust in you that they don't feel the need to monitor your phone calls, instant messages, email etc?

      --
      Please alter my pants as fashion dictates.
    2. Re:I still don't get this.... by The+Cat · · Score: 5, Insightful

      Why do you have any expectation of privacy?

      Because you're a human being with human rights. One of those rights is freedom of speech, and part of that freedom is the ability to control when, where and to whom to speak. The speech is what should be protected, not the company's stupid network.

      If they don't want to hire people, fine. Let them buy an M$ wizzzzzzzard to set up their databases and sit in meetings. But if they want hard-working, knowledgeable, imaginative people, then they are going to have to accept the fact that they are HUMAN BEINGS, not machines.

      Just because you're in a "building you don't own" doesn't mean you have to hand over control of your entire life to some middle-manager.

      People are people FIRST, then "employees." This "the company rules the universe" routine is getting REALLY fatiguing.

    3. Re:I still don't get this.... by Wavicle · · Score: 2

      IANAL: There are some circumstances under which the law grants you "reasonable expectation" of privacy. For example, your employer absolutely may not tap in any way a bathroom or changing room (say if your workplace had a gym).

      Of course the bathroom is the easy one. Things start going down hill from there. The courts have general held that people have a reasonable expectation of privacy on the telephone, and employers are usually barred from recording calls to/from an external source. Hypothetical example: An employee waiting to hear the results of a VD test from their doctor will probably want the doctor to call them as soon as the results are in, but won't want it to be management's hot gossip of the week. The employee has a reasonable expectation of privacy when their doctor calls them on the phone whether it is at work or home.

      When you get to email, the courts don't generally find personal issues which need prompt notification are transmitted via email. So the conditions under which you would need an expectation of privacy are far fewer, so monitoring internet crap is usually acceptable.

      --
      Education is a better safeguard of liberty than a standing army.
      Edward Everett (1794 - 1865)
    4. Re:I still don't get this.... by q-soe · · Score: 1, Offtopic

      many of us work in environments where our calls are taped and monitored.

      And as a manager let me tell you what that 'trust' gets you - gigabytes of porn, movies, racism, games, and the other shit - none of which have any place at work.

      While people abuse trust companies will not trust people. we used to have unmonitored email and web, we now monitor everything after the mp3 dowloading and porn your friends by email gave is 2 sexual harrasment cases and a massive (300%) jump in web traffic.

      people need to demonstrate they are worthy of trust - it's not an implicit right in the workforce

      --
      I refuse to argue with Anonymous Cowards - if you want a discussion get an account....
    5. Re:I still don't get this.... by dgroskind · · Score: 2

      The employee has a reasonable expectation of privacy when their doctor calls them on the phone whether it is at work or home.

      Legally perhaps, but in practical terms employees should assume their employers are listening and act accordingly. Individual employees are virtually powerless when dealing with their employers unless they are in a union and their actions are protected by the contract.

    6. Re:I still don't get this.... by osgeek · · Score: 2

      "Freedom of Speech" (in the US sense) is the right to not have the government restrict your speech, since eventually it will impinge upon your political speech, which would be bad.

      It really has nothing to do with your employee/employer relationship.

    7. Re:I still don't get this.... by anthony_dipierro · · Score: 2

      Because you're a human being with human rights. One of those rights is freedom of speech, and part of that freedom is the ability to control when, where and to whom to speak.

      Another is the right to enter into contracts where you agree to limit your speech. If that contract is excessive (never talk again), or illegal (don't tell them about the ammonia we put in cigarettes), you might get out of it. But if that contract is simply "don't use our network for personal conversations", then it's a whole different story.

      If you want to speak freely, don't sign contracts agreeing not to. If you want job security, make sure you sign a contract giving it to you. If you want privacy, make sure that a) your company signs an agreement to give it to you, and b) you have the sole administrator password to your machine.

      If you want a job, ignore all the things I said above. Or be prepared to not have many choices.

    8. Re:I still don't get this.... by The+Cat · · Score: 3, Insightful

      But these "contracts" are almost never written. They are decrees delivered from the raised dais of management, usually in the form of a memo.

      To expect to isolate someone from all "personal" conversations during the work day is an unjust exercise of control, basically for the sake of control. It really has next to nothing to do with the company or the work.

      It certainly doesn't give the employer the right to the contents of that conversation.

      For most of the people in this country, a job is a necessity. To withhold necessities from people in exchange for their abdication of their inalienable (an important word) rights is to offend those rights to the point of denying them altogether.

      No person, employer or otherwise, should be empowered, either by necessity or choice, to deny the basic rights of another person.

    9. Re:I still don't get this.... by The+Cat · · Score: 2

      Freedom of speech is also the right to not have another person restrict your speech, otherwise it is no freedom at all.

      Why is the employee/employer relationship entitled to so many exemptions from the basics of every other element of society? What if a non-employer corporation sought to restrict the speech of people? The screams would shake the Earth.

      Why is it acceptable then for an employer to do the exact same thing?

    10. Re:I still don't get this.... by Anonymous Coward · · Score: 0

      Ok. So out in the parking lot that you do not own, or at the McDonalds that you don't own, or on the tollway that you don't own... Do you expect your cell phone to be bugged?

    11. Re:I still don't get this.... by meatpopcicle · · Score: 1

      You should be careful of certain things you say, but you should also expect some sense of privacy too.

      Employers cannot think that all of your time is work related. They check their personal email and surf too.

      What kind of environment to they foster by snooping on everyone and taking advantage of that information. I certainly would start looking elsewhere if rumors stated in my personal email came back to haunt me.

      What about your lunch break. That is your time, should you still have to follow the same rules then when it is your time? Its their equipment, but its your time. Should those emails be subject to company policy???

      --
      "You're on my side and the dark side, like Lando Calrissian?" --Gimpy, Undergrads
    12. Re:I still don't get this.... by detritus. · · Score: 2

      Granted, but the company is in a country they don't own either. Companies at one time had alot more freedoms, but because they exploited those freedoms to their greedy advantage, (especially on employees) restrictions and regulations were brought in.

      I think people expect privacy just because of the handful of laws that protect workers otherwise (minimum wage, discrimination, etc). While the privacy rights may not exist, there's always a chance they someday might.

    13. Re:I still don't get this.... by anthony_dipierro · · Score: 2

      But these "contracts" are almost never written. They are decrees delivered from the raised dais of management, usually in the form of a memo.

      True, but most people don't have real employment contracts at all. Usually employers can fire employees for any non-discriminatory reason, and at most all they get is two weeks severance pay. If you want to be able to speak freely and still keep your job, you need to get that put into your employment contract.

      To expect to isolate someone from all "personal" conversations during the work day is an unjust exercise of control, basically for the sake of control. It really has next to nothing to do with the company or the work.

      Possibly, although there are certainly some circumstances where allowing any unaudited outside communication is dangerous. But the point is that you chose that job. No one is forcing you to work there.

      It certainly doesn't give the employer the right to the contents of that conversation.

      Unless your employment contract that you signed says that the company reserves to right to record any communication you send over their network (or some lawyerly version of that).

      For most of the people in this country, a job is a necessity.

      Sure, but a job in a particular industry, let alone a particular company, is not a necessity. If you and your coworkers aren't good at negotiating employment contracts, maybe you should think about hiring someone else to negotiate your employment contracts for you.

      No person, employer or otherwise, should be empowered, either by necessity or choice, to deny the basic rights of another person.

      What are these basic rights exactly? It seems to me like you've made just about every contract illegal.

      If you want to have rights in this society, you have to stand up for them. There are still good places to work here in the United States. They may not pay as well as selling your soul to the company (who are waiting there to sell plasticware), but for some people it's well worth the cut in pay to gain the increase in personal freedom.

    14. Re:I still don't get this.... by The+Cat · · Score: 2

      If you want to be able to speak freely and still keep your job, you need to get that put into your employment contract.

      It would be redundant. Employment contracts that contradict the Bill of Rights are void.

      Possibly, although there are certainly some circumstances where allowing any unaudited outside communication

      In such a case, where there is a legitimate business need, restrictions on what a person is allowed to say are acceptable, provided it is an agreement. But an agreement by default that employees are to conduct not a single personal conversation at work for the entirety of their career is unjust.

      No one is forcing you to work there.

      No, but a person's rights follow them wherever they go. If a person chooses to work somewhere, a person chooses to bring their humanity with them, and also their rights. Again, the word "inalienable" comes into play here.

      What are these basic rights exactly? It seems to me like you've made just about every contract illegal.

      Freedom of speech, press, religion, privacy, against unreasonable search and seizure, due process, etc.

      Speech is the issue here. Who pays for the communications system is irrelevant. Freedom of speech supersedes who paid the phone bill.

    15. Re:I still don't get this.... by Anonymous Coward · · Score: 0

      I think you're getting confused between freedom of speech and freedom from consequences of your speech. Yes, it would probably be illegal for an employment contract to bar you from all personal communication while at work. But if you are an at-will employee (and most of us are), it is not illegal for your employer to fire you, for just about any reason. If your employer chooses to fire you because you said the word "onion", that's perfectly legal.

    16. Re:I still don't get this.... by sql*kitten · · Score: 2

      Because you're a human being with human rights. One of those rights is freedom of speech, and part of that freedom is the ability to control when, where and to whom to speak. The speech is what should be protected, not the company's stupid network.

      By that argument, a newspaper editor has no right not to publish your letter. It's your right to free speech, right? Wrong. The right to free speech means that the Government won't send armed men to assault you if your criticize it. It's nothing to do with the right to use other people's property in ways that they do not agree to.

      If your company says, you cannot use your personal mobile phone to make a personal call during your lunch break, then we have a problem. I'm not aware of any company that says that.

    17. Re:I still don't get this.... by Anonymous Coward · · Score: 0

      that reminds me, I haven't read last week's The Onion yet....thanks.

    18. Re:I still don't get this.... by Annamite · · Score: 1


      On a same note,

      I am in a room that I do not own
      I am sitting inside a cube that is not mine...
      .. almost naked on a throne
      .. taking a dump.

      Am I expecting any privacy?

      Many tompeepers do not think so and I think the law says otherwise..

    19. Re:I still don't get this.... by Peridriga · · Score: 2

      Yes

  34. Logging is mandatory by Glorat · · Score: 3, Informative

    I've worked at a certain big investment bank over the summer. Internet access there was completely firewalled away except for a port 80 HTTP proxy server. Now, one could tunnel IM programs through this successfully but even then, the company has a zero-tolerance policy that bans any use of IM programs.

    There is a very good reason for this. Apart from the usual virus problems, it is often *mandatory* by law for investment banks to log all communications between employees and clients, just like the article says. It is well known that all telephone calls are recorded for this reason. All proxy requests are naturally recorded and scanned for port and external mail use (also against company policy). Allowing IM would equally thus be in violation of company policy and legal requirements. Unless of course... if a system was introduced where all messages could be reliably logged and traced.

    If you still aren't convinced about these policy issues, consider this. In a IB, if your phones are tapped, all web access is logged and you know it, then perhaps consider that logging IM isn't such a big extra step.

    1. Re:Logging is mandatory by Glorat · · Score: 1

      Mini typo back there... that was meant to be "proxy requests... are scanned for porn". Not sure how you can scan for port =P

  35. Re:Project Faustus is watching by Anonymous Coward · · Score: 0

    cut the crap, pppplllllleeeeeeeeeaaaaaassssssssseeeeeee

    your routine is old and trolling is dead for good on slashdot

    all the trollers have either gotten laid (gasp!) or have killed themselves while masturbating furiously

    THANK U :)

  36. Oh, you have to OWN it all! by Anonymous Coward · · Score: 0

    So, does that mean if I'm in my rented apartment, sitting at my roommate's computer, posting on Slashdot via my local ISP, that I should expect no privacy either?

    What if it's my computer but I still don't own my house? Can I have privacy then, or not?

    1. Re:Oh, you have to OWN it all! by Anonymous Coward · · Score: 0

      I'll answer you once you rent a brain and make an intelligent comment...

  37. This is news how? by Anonymous Coward · · Score: 0

    There's a reason Think Geek sells t-shirts that proclaim, "I read your e-mail."

    When you're at work, you're using their computers. Their network. Their bandwidth.

    And they? They own j00 arse.

    1. Re:This is news how? by hammerm · · Score: 1
      When you're at work, you're using their computers. Their network. Their bandwidth.

      Although part of me agrees with you, I feel that if a boss or IT guy is reading my communications without any reason but curiosity, he is the one that should be monitored.

      On the other hand, the other day I went to see the IT director for my campus and was sitting in his secretary's office waiting for him to arrive and the entire time, his secretary was talking to somebody online with what looked like AIM. As a tuition payer, I feel my stomach turn knowing that at least a little bit of my money is going to fund that behavior.

  38. My company and the last place I worked by Anonymous Coward · · Score: 2, Informative

    The last place I worked was a dying publicly owned company on the Canadian Stock Exchange. As one of 3 IT guys in this software company of 100 high-high-maintenance clients, I spent a lot of time monitoring my fellow employees for news of the companies impending doom.

    I discovered that the 'promised-management-positions' crowd was keeping close tabs on their fellow employees as well. Monitoring exactly how long each of us worked, took breaks for, (and of course) never mentioning the major overtime we put in.

    It's funny, because between them monitoring us and talking all day with numerous online boyfriends - the management hardly did any work. We on the other hand managed to keep 100 clients happy, fix the "Interactive Unix" network so that it didn't die each and every day, *and* format all of their MSN chat logs for easy reading off a floppy disk when the inevitable day came that we would quit.

    and man, those chat logs were good!

    Once we left, we started our own Software Company and are almost ready to release software exactly for companies like that. Network Security & Productivity monitoring software. I wish we had a package like this when we were there, but don't get me wrong - NGREP worked pretty well too.

    NGREP src 192.168.10.3 or dst 192.168.10.3 -ql "MSN-IM-Format" >log.log

  39. not so simple solution by Dw0rkin · · Score: 1

    I am assuming that you are competent with *nix and nt, so installing a keystroke sniffer or VNC wouldn't go unnoticed. This works for offices with people who don't care what you are doing...

    Now, to avoid those pesky little spyware, you can always bring your laptop to work. (best some exotic, like an iBook running MacOSX) From there, you can usually hook it up to the company network - ask your system admin before you do though and be so kind to find out his or her birthday and send him a card or give him a present, a long time before you ask :)

    Now, being allowed to run your laptop on the company network either use SSH to connect to your home computer like another post suggested (btw, ssh does not HAVE to run at port 22 and some port on the network is likely not to be blocked). Or you can always use your favorite instant message client with SSH tunneling, or if you want to be extremely cool, you can use something like KDX which has a secure connection built in. Or you could use HXD...

    As long as you are just a bit careful about what you do and dont start slacking at work, I doubt anyone will object to you being logged into an IM thing anyway.

  40. Ah yes by The+Cat · · Score: 5, Interesting

    The famous workplace, where your freedom is checked at the door.

    For people so concerned with freedom, it is astonishing that the entirety of a person's basic rights are handed over like a movie ticket once the workday begins.

    And to top it all off, everyone DEFENDS this by saying, "well, they sign your paycheck."

    Newsflash: signing a paycheck != control someone's life.

    Here are people who tell you what to do 40, 50, 60 hours a week. What time to sleep. How long to spend eating. What kind of house you can buy. Where you must live. What to say. How to dress. How many phone calls to make. What web sites to visit. And so on. It's worse than grade school. If you don't like it, you're "downsized."

    Personal life is not to interfere in the workday. No personal activities of any kind are to be conducted at work, unless you're a manager and you have kids. Then you can "take the afternoon off" or leave early on Friday any time you feel like it. All time off is given begrudgingly, even if it is pre-approved.

    Now they'll just help themselves to every word typed or spoken during the workday. Excuse me, but why is the workplace exempt from a person's inalienable rights? Why are companies allowed to treat people this way? Why is a paycheck carte blanche to control someone's life?

    If it isn't company business, PAYCHECK OR NOT, it isn't company business. Period. People should be given the freedom to be people before corporate drones.

    1. Re:Ah yes by Anonymous Coward · · Score: 0

      this is why self employment owns

    2. Re:Ah yes by ryanvm · · Score: 5, Insightful

      If it isn't company business, PAYCHECK OR NOT, it isn't company business. Period. People should be given the freedom to be people before corporate drones.

      Who are you, Bodhi from Point Blank?

      No one forces you to take a job. When you do, you engage in a contract with your employer. It says I will provide X amount of hours of labor for X amount of wages. If you are fucking off chatting with your warez buddies on AIM, than you are not fulfilling your end of the bargain. You are ripping off your employer. Period.

      If I pay someone to dig holes for me for 1 hour, then I am entitled stand beside him and make sure he digs for that hour. Even moreso if he's using my shovel. Why do you think that because you work with computer equipment that you are special? It's the same thing.

      Excuse me, but why is the workplace exempt from a person's inalienable rights?

      I don't think you understand. You do not have an inalienable right to use other people's equipment to chat on the Internet. If you want to do that - do it at home, where you pay for it.

    3. Re:Ah yes by Jerf · · Score: 2

      Note to moderators: The parent was not a troll. I'd say it's a decently reasoned opinion.

      For comparision, here's my take on the issue. First, I'm a bigtime privacy wonk. Second, despite that, I still believe that a corporation can pretty much do whatever it can get away with to its employees legally, and that legal action should NOT be taken to 'correct' this.

      The fact of the matter is we have a perfectly fine set of union laws, which provide protection. This is a union issue. If you don't want to be monitored like cows, make your union make an issue out of it. It's stress inducing, it's probably a waste of company resources (after a certain point), it's probably not a net business gain (after a certain point) anyhow, rigid rules rarely match reality, it's not hard to come with counterarguments.

      But until people care, and not just a bare minority, nothing will happen. In this case, I am actually against laws... they'd only make things worse. (Not that you were proposing them, I'm just giving my position for comparision to yours.)

    4. Re:Ah yes by The+Cat · · Score: 2

      No one forces you to take a job.

      No, but there is a rather compelling incentive to keep a job, and the draconian restrictions on your every working minute are usually not discussed until well after the W-4 has been signed.

      chatting with your warez buddies on AIM

      Objection. Assumes facts not in evidence.

      This is called "reductio ad absurdum." The proposed regulation is to restrict ALL personal conversation during the work day. How about a mother calling the school to discuss a pick up time with the principal? Isn't it equally absurd to suppose that an employer is within their rights to force a mother to leave her own children stranded somewhere? Or should she arrange for her children on her own time? lol

      Why do you think that because you work with computer equipment that you are special?

      I have a better question: Why do employers think that because they distribute paychecks that they are entitled to ignore the basic dignity of the people they employ and attempt to control their lives?

      You do not have an inalienable right to use other people's equipment to chat on the Internet.

      Fine. Does an employee have the right to eat lunch at their desk, or should they have rental for the area deducted from their paycheck? Does an employee have the right to use the restroom? Should they pay to park their car in the office parking structure? None of those areas belong to the employee either. No one is forcing the employee to drive their car to work. No one is forcing them to eat lunch either.

      If employers want to continue to develop this adversarial relationship with their employees, that's fine. I certainly hope they don't plan to gripe when morale sinks to 0 and/or all the qualified people quit because there is someone standing next to them all day making sure they fulfill the letter of their contract.

      All that said, it doesn't change the original point. Employer or not, they do NOT have the right to regulate another person's speech.

    5. Re:Ah yes by Keeper · · Score: 2

      You havn't worked much in your life have you?

      The company has a right to dictate how it's resources are used.

      Most companies WANT you to eat at your desk -- less time out of the office, more time working. So they do what they can to encourage that behavior.

      Many companies located in areas where parking is scarce charge their employees parking fees. Albiet, usually at a cheaper rate than the local lots. Don't like it? Walk, ride a bike, or take the bus.

      Depending on the type of job you work, restroom breaks are regulated, and are normally restricted in frequency and duration to the limits the law allows (or whatever your labor union negotiated).

      And an employer CAN regulate your speech when it involves company business. NDA's are a prime example. They can't do shit about your political opinions, but they can tell you not to talk about it on company time. They can also terminate you for telling off a customer.

      That's the way it is. The time at which you sign your tax papers doesn't mean shit. If you don't like it, quit. If you don't want to quit, get over it.

    6. Re:Ah yes by The+Cat · · Score: 2

      You havn't worked much in your life have you?

      lol Whatever.

      The company has a right to dictate how it's resources are used.

      Up to the point where it infringes on an employees rights. This is not arguable. An employer has to abide by the same rules as everyone else.

      Most companies WANT you to eat at your desk -- less time out of the office, more time working. So they do what they can to encourage that behavior.

      Oh, so now they can pick and choose when and where to trample a person's rights?

      charge their employees parking fees... restroom breaks are regulated, and are normally restricted in frequency and duration

      lol "Well, there went the last of the reasonable employees"

      And an employer CAN regulate your speech when it involves company business. NDA's are a prime example.

      Fine. As long as it's an agreement and it involves company business. When it is NOT an agreement and/or does NOT involve company business, the employer's interests, and therefore their authority, stops.

      That's the way it is.

      Well, it's not the way it should be. People should not have to surrender their freedoms in order to make a living.

    7. Re:Ah yes by Kallahar · · Score: 2

      On a similar note, my cousin had a computer at home that his company supplied. He knew it was being monitored, and he wanted me to disable the monitoring so that he could use it for personal surfing at night (off hours). I told him that since it was the company's computer, and the company's internet connection, it was really up to them to decide company policy. I suggested that he get his own computer and connection, or to work it out with his company to let him use it for personal use. In the end, he left the company.

    8. Re:Ah yes by 5KVGhost · · Score: 1

      "If I pay someone to dig holes for me for 1 hour, then I am entitled stand beside him and make sure he digs for that hour."

      You load sixteen tons
      And what do you get?
      Another day older
      And deeper in debt.
      Saint Peter, don't you call me
      'cause I can't go
      I owe my soul to the company store.

      Of course you can stand next to him and stare at him for an hour. You can make him wear clown shoes, hop on one foot, and sing Russian drinking songs too, if you like. None of those things are likely to make him do his job any better, just the opposite most likely, but if they make you happy as an employer then that's your business. I imagine you'll have a lot of turnover, though. I wonder why?

      Personally, I prefer hiring people I don't have to cajole into compliance or monitor every working hour. And I'd rather they got their work done correctly on time and trust them to go potty and snacktime all by themselves. That leaves me free to do my job, which includes lots of other stuff besides wasting my time enforcing pointless employment provisions and engendering constant fear of imminent unemployment.

      I've never seen the need to treat my employees like elementary school students or indentured servants. I treat them with trust and respect, and if they prove undeserving of that trust and respect then they will need to change their ways or be replaced. So long as they do their jobs and do them well, I frankly don't give a damn if they chat or make personal calls. Why should I?

    9. Re:Ah yes by flink · · Score: 1

      I work in Boston in the Back Bay area. Parking here can be in excess of $400/month (at the Prudential lot, anyway). The parking in our building is extremely limited and the waiting list for one of these spots is years long. My company will kick in $250 for the parking or 50% of the cost of a T pass, which I think is very reasonable.

      I really don't think it is the employer's responsiblity to pay for your transportation costs. Sure if the office is in a rural area or on in some industrial park off of the highway, then they pretty much have to provide parking.

    10. Re:Ah yes by ryanvm · · Score: 2

      I've never seen the need to treat my employees like elementary school students or indentured servants.

      I agree with you completely. Treating people like that would be counter-productive and inconsiderate. But it would not be illegal.

      I was responding to some guy who thinks that employees have an inalienable right to private communications while using other people's equipment. They don't.

    11. Re:Ah yes by 5KVGhost · · Score: 1

      agree with you completely. Treating people like that would be counter-productive and inconsiderate. But it would not be illegal.

      Ah, ok. Sorry if I took your post out of context. You're right, though, it's not illegal.

    12. Re:Ah yes by Keeper · · Score: 2

      Since when is sending your buddies IM's on a company computer using a company network on company time a "right"?

      Using a company phone on company property on company property isn't a right, so why the hell is doing the same thing over a computer any different?

      Spending 7 hours a day talking on the phone with your friends would get you fired, no questions asked. Why is doing the same thing on a computer any different?

      Some places suck to work at. Find a better job if you don't like it -- I refuse to work at a company that regulates bathroom breaks or monitors communications. If you can't find a better job, the problem is either with you or the fact that no company offers a better set of standards, in which case it's time to join a union and start fighting for what you believe to be right.

  41. More and more I read these articles... by Anonymous Coward · · Score: 0

    A week before they hit Slashdot. SLASHDOT YOU SUCK POOPSICLES!

  42. here is an easy, but less-reliable, transfer... by AnimeFreak · · Score: 2

    ...method!!!

    http://www.guerrilla.net/reference/biological/rfc3 043.html

    Try logging that! Then again, the company could shoot the birds down or fire you for having birds in the office. Or to make matters worse, the bird getting hurt along the way (like flying into a window while trying to send the packet).

  43. Use a secure IM application by Anonymous Coward · · Score: 1, Interesting

    There are several programs that encrypt instant messages. For example, see Simp which is an open source IM program using Blowfish to encrypt all communications. You can download it and recompile it yourself to extend the key bitlength.

  44. Companies destroy e-documents by Gumber · · Score: 2

    while companies may archive e-mail, I think many more have a policy of distroying e-mail and all bakups after a certain retention period. Critical messages are explicitly archived, along with other documents.

    They destroy e-mail archives because they don't want it to be used against them later. The roasting Microsoft got over internal e-mail has put the fear into them (if they didn't have it already).

    The same will likely hold for IM traffic, but it is still safe to assume that it will be logged and retained for some period of time.

  45. My Suggestion... by epiphani · · Score: 1
    -Boss- I want you to implement something to grab all ICQ messages sent through our network.
    -Me- No.
    -Boss- Why?
    -Me- Because I've got better things to do with my time than set up big brother stuff so you can make sure you're employees are working.
    -Boss- But you're playing UT
    -Me- No.
    -Boss- Yes you are, I can see you doing it right now.
    -Me- You are mistaken. This is a highly advanced network troubleshooting tool. See, thats a Windows box emitting smb traffic, that red flag. I've come to kill it.
    -Boss- So you're not going to implement this thing for me?
    -Me- Correct.
    Boss wanders off annoyed


    This Conversation is paraphrased, but did happen. The moral of the story is, arent *we* the network admins. If we cant push our boss around like I used to be able to (the company went backrupt in the .bomb), then we should at least be able to talk them out of it.

    --
    .
    1. Re:My Suggestion... by Anonymous Coward · · Score: 0

      The boss should have fired your ass.

      Maybe if geeks like you stopped power tripping, and let the managers actually manage the business, there would have been less companies (like yours) that get .bombed

      You're a techie. Monitoring is a business decision. It's your job to implement it if management decides it is necessary. get over yourself.

    2. Re:My Suggestion... by Anonymous Coward · · Score: 0

      damn right, and say, if you were paid for harassing people, you'd be just doing your job, that's all, nothing to see there.

  46. Old news, CNN had it first. by Anonymous Coward · · Score: 0

    Props to CNN for having this article first, Slashdot always has old news.. sigh.

  47. Your "likeness" and natural copyright by hyrdra · · Score: 5, Interesting

    This may sound strange, but if a company is recording your chat sessions, instant messages, or e-mail communications, you can sue them for copyright infringement.

    Sure, it would get all the merit of some of the recent patent lawsuits, but it's perfectly legal. At work, you have no expectation of privacy and often you even explicitly waive these rights by AUPs, as others have mentioned, so you have no legal high ground.

    However of all the AUPs I have seen, none mention the property transfer of your communications, which are effectively your thoughts and are unique to you. This is called your "likeness". You are expressing it in your messages and chat transcripts, and by your employer snooping on you and storing records, they are effectively "copying" your copyrighted material, which you can claim copyright to.

    Unless you're in a contract situation, the only works your company owns are those, which it has commissioned. Despite popular belief, it doesn't own everything you do at work -- only the work from your assigned tasks/projects/whatever.

    I am no legal expert by any means, but at lunch with a lawyer friend I brought this issue up, and he said if he had a client in this situation he would have whatever logs found non-admissible due to copyright infringement. He then told me about likeness and how it can be used against an employer and possibly even to be on the plaintiff side of a suit. I found it interesting he would challenge this privacy issue from this interesting angle.

    I guess you're best actually doing work while at work. If you must have security, use the various methods of encryption. Don't be stupid. :-)

    --


    "I'll just chip in a bit for RedHat: I actually have that installed on my university machine." - Linus, '95
    1. Re:Your "likeness" and natural copyright by bmetz · · Score: 2

      Wrong. While on company time you don't own your thoughts and you especially don't own what you write. If you create the world's most effective widget in your cubicle while you should be working on something else, guess what? Your employer owns the widget. Or at least that's the standard contract..

      --
      What did you eat today? http://www.atetoday.com/
    2. Re:Your "likeness" and natural copyright by dgroskind · · Score: 1

      you can sue them for copyright infringement

      And expect to have your chances of promotion severely limited if you don't get summarily dismissed. And if you apply for a job somewhere in the future and they call your previous employer for a reference, expect to have your litigious behavior mentioned and the fact that you were carrying on personal business on company time.

      And don't forget the large legal bills for your suit, particularly if the company counter-sues. Also the years of litigation.

      One can only hope you had something important to say in your instant messaging session to justify all this trouble and expense.

    3. Re:Your "likeness" and natural copyright by Anonynnous+Coward · · Score: 1
      expect to have your litigious behavior mentioned

      Which companies with experience in the arena know, would cause more litigious behavior. They'll just say "wouldn't rehire," if they even have the balls to say that. You've obviously never experienced the frustration of not being able to tell a prospective employer of some deadwood you fired the real story, but instead being forced to refer your colleague to HR, where they will spout something safe and politically correct.

      But really, do you want a blacklist of anyone that sues an employer? Would you change your mind if you found yourself suing someday for a legitimate grievance?

    4. Re:Your "likeness" and natural copyright by dgroskind · · Score: 1

      But really, do you want a blacklist of anyone that sues an employer?

      My desires have nothing to do with it. The risk of blacklisting is real and the prudent employee will deal with it as best he can.

    5. Re:Your "likeness" and natural copyright by Anonynnous+Coward · · Score: 1

      The risk of a broken man with no place to go who can't find a job because he was blacklisted and coming in with an automatic weapon and spraying the executive suite is real and the prudent employer will deal with it as best he can.

    6. Re:Your "likeness" and natural copyright by dgroskind · · Score: 1

      The risk of a broken man with no place to go who can't find a job because he was blacklisted ...

      Actually, I believe they are more likely to commit suicide. All of the cases I know of where an employee went postal, the firing appears to have been justified.

    7. Re:Your "likeness" and natural copyright by Anonynnous+Coward · · Score: 1
      Ah, but the craftier despondent ones don't commit suicide until after they've taken a few of the people against whom they feel aggrieved with them.

      People with nothing to lose and who are willing to die have nothing to fear--maybe it'd be best to outlaw things like blacklists that create them.

    8. Re:Your "likeness" and natural copyright by dgroskind · · Score: 1

      the craftier despondent ones don't commit suicide until after...

      None of the cases you cite have anything to do with blacklists. Some of the murderers hadn't even been fired or the grievances weren't work related. How you can describe any of these people as "crafty" is a mystery. "Pathetic" is more acurate and more charitable.

      maybe it'd be best to outlaw things like blacklists

      Outlawing blacklists won't get rid of them since they tend to be informal, word-of-mouth things. The crafty employee avoids them altogether.

    9. Re:Your "likeness" and natural copyright by Anonymous Coward · · Score: 0
      Crafty is a relative term--certainly someone who's going to kill himself anyway is craftier if he takes some of his enemies with him, no?

      And whether these particular cases involve blacklisting is irrelevant, as is the legality or illegality of them--driving someone to desparation by whatever means could be dangerous to the ones doing so, whether they do it with a database or with an "informal, word-of-mouth thing."

    10. Re:Your "likeness" and natural copyright by SuiteSisterMary · · Score: 2

      Nah. Creation during company time, on company equipment, means that you're creating for the company. If nothing else, all this would do is make sure that 'work for hire' becomes standard in employment contracts, or simply remove IM, or Internet access in general, from everybody's desktop.

      --
      Vintage computer games and RPG books available. Email me if you're interested.
    11. Re:Your "likeness" and natural copyright by dgroskind · · Score: 1

      certainly someone who's going to kill himself anyway is craftier if he takes some of his enemies with him...

      Most of the victims weren't even enemies of the murderers. Some, probably all, of the perps were mentally disturbed to begin with. Their actions were crude, ineffective and wasteful, the antithesis of crafty.

      For future reference: intentionally killing yourself rates zero on the craftiness scale no matter how many other people you make miserable.

    12. Re:Your "likeness" and natural copyright by Anonymous Coward · · Score: 0
      ineffective

      Tell that to the dead. And I guess we'll just disagree on the seemingly obvious point that it's at least less dumb to take some enemies with you on your way out.

    13. Re:Your "likeness" and natural copyright by Kallahar · · Score: 2

      ** read your contract **

      Some companies do indeed own everything you say/do/think while at work. Some even try to own what you do outside of work. Read the fine print in your contract to make sure you know YOUR rights, don't assume that your rights are the same as some other guy on the internet!

      Sueing your company for a DMCA violation would be cool though :) I hope there's some way to do it to the RIAA :)

  48. First email, then URLs, then IMs... by Ankh · · Score: 2, Interesting

    In the late 1990s companies started to monitor their employees' electronic mail, in case anyone was not working, or was not towing te corporate line.

    Then they started to watch where people surfed. After all, employees were not executives, they could not be trusted.

    In 2002 they started to monitor Instant Messages and to log them all.

    In 2004 software to trnascribe telephone calls became common, and these too were logged.

    By the end of 2010 and the unbiquity of the thought transponder, the slavery of the employee was complete, and all human spirit was destroyed in the never-ending quests for profit and longer golf sessions.

    All employees dressed identically, lived in identical houses with identical husbands, and wore identical corporate socks.

    Is this the future we want?

    How do we tell the corporate world that life is about people, not profit? The joy of sharing, of living in a community, of being alive, that is what matters. Take off those corporate socks and be free!

    (is your postal mail is being monitored too? did you have rights, once?)

    It's easy to say, this seems reasonable. It's hard to take a stand for what seems right. Do it anyway.

    --

    --
    Live barefoot!
    free engravings/woodcuts
    1. Re:First email, then URLs, then IMs... by Anonymous Coward · · Score: 0

      Every time i read shit like this i am reminded of why i rarely comment on here anymore, and then i see you have a 1 and realise your'e another loser troll.

      I love you guys - freedom for everything until someonf fucks you over, then you all cry

    2. Re:First email, then URLs, then IMs... by Anonymous Coward · · Score: 0

      What an idiot you are. You don't even know that phone conversations are already logged in many companies.

      I promise to stand for what is right. Workplace monitoring of computer use is right.

    3. Re:First email, then URLs, then IMs... by Cid+Highwind · · Score: 2, Insightful

      As long as people buy into the modern advertising myth that happiness is found in the neverending pursuit of More Stuff(tm) they will be slaves to the corporate whim.

      --
      0 1 - just my two bits
  49. you're right it depends on the job... by koekepeer · · Score: 1

    but it could be applied to almost any job, as long as other people do not strictly depend on you (eg nurses)

    if we all were not organizing our jobs to a nine-to-five time-schedule, we'd be a lot more relaxed. i think that it's much more motivating to focus on getting a task done. if that means working 12 hours straight the one day, and taking off the other day, it's no problem.

    of course i'm speaking as someone who has the freedom to choose his working hours, but i do get the job done. quite efficiently compared to most of my 9-5 oriented co-workers actually.

    actually, i've been reading "the hacker ethic" form pekka himanen last month, and he has some very interesting things to say about the current "protestant work ethic" vs an alternative, not so time-oriented work ethic. the book's a "must buy" IMHO

  50. Trolls... by GafTheHorseInTears · · Score: 0, Funny

    will post goatse links if they think they can get away with it.

    --
    "You're just scared like a little white pussy. I'll fuck you till you love me, you faggot!"
  51. PGP, GPG, SSL and SSH by Anonymous Coward · · Score: 0
  52. Re: Tunneling by pbryan · · Score: 3, Informative

    I currently SSH tunnel for IRC, but for IM related software, I can't seem to SSH tunnel and get the relevant ports forwarded.

    Assuming you have a recent version of OpenSSH, follow these instructions:

    1. Run ssh -D 1080 hostname. This causes ssh provide a SOCKS v4 proxy services when connecting to localhost on port 1080.

    2. Set your IM client to use your SOCKS v4 proxy server and point it to localhost on port 1080. Most IM clients support the SOCKS proxy protocol.

    3. Chat.

    --

    My car gets 40 rods to the hogshead, and that's the way I likes it!

  53. What constitutes permission? by m_evanchik · · Score: 2

    what constitutes permission for fair use?

    1. Re:What constitutes permission? by m_evanchik · · Score: 2

      what I mean is, when is it okay to post nude pictures on the internet? And won't you be embarassed when your kids see 'em, especially the pictures their father took the nights they were conceived?

      Seriously though, how much privacy should we be able to insist upon.

      Certainly plenty when our naked bodies are concerned.

    2. Re:What constitutes permission? by Anonymous Coward · · Score: 0
      Whatever are you talking about...?

      what I mean is, when is it okay to post nude pictures on the internet?

      Well, "not on company time" would be a start.

    3. Re:What constitutes permission? by Anonymous Coward · · Score: 0

      Well, "not on company time" would be a start.

      What if you work for Playboy?

  54. There are more implications to this... by shlamo · · Score: 1

    So far all of the posts have become: "Oh no my boss will catch me using an instant messager." What about your instant messages being logged by companies who will then in turn use your information to make a profit (either through advertising, private investigation, etc.) Personal data can be stored and later used for blackmail. I know that it is very improbable but after years of using instant messaging don't you think you will say 1) something incriminating and 2) something about your personal life that you probably wouldn't want others to know to a trusted source (family members, best friend, significant other). There is also the issue of instant messages being used in court. Now, more than often instant messages are being used as evidence. Most of the time there are hard copies of conversations on the hard drive that are used. Who is to say that "intercepted" messages won't be used in the future. Some of the encryption suggestions I read are interesting. It would definitely help to protect your privacy. It's not a matter of having something to hide it's the principal of not letting others have a window into your life.

    1. Re:There are more implications to this... by q-soe · · Score: 3, Interesting

      "What about your instant messages being logged by companies who will then in turn use your information to make a profit"

      they can as they legally own anything you do, write or say on company equipment in company time (it's been proven - do a websearch on the subject)

      "Personal data can be stored and later used for blackmail"

      What ARE you doing at work and who do you work for - what company would actually do this.

      --
      I refuse to argue with Anonymous Cowards - if you want a discussion get an account....
    2. Re:There are more implications to this... by Anonymous Coward · · Score: 0

      "Personal data can be stored and later used for blackmail"
      What ARE you doing at work and who do you work for - what company would actually do this.


      perhaps not a company but someone in the company who doesn't like you

  55. XP by Anonymous Coward · · Score: 0

    Having just added an XP machine to a small company network, one that uses internet sharing to connect to the net via modem, I was shocked to find that Messenger would start up and of course attempt to access the net. Seeing as the poor company is still on a per-minute dial-up this could prove rather expensive. Do Microsoft really think that everyone who selects "I connect to the Internet via a LAN" has a 24/7 broadband unmetered connection?

  56. codetalking ... by beanerspace · · Score: 3, Interesting

    My father used to tell me stories of when he was stationed in WWII in the Aleutian Islands, preparing as a SeaBee for the invasion of Japan. One of the stories that continued to amaze him was the deployment of Native Americans to handle communications, now populary referred to as Code Talkers.

    Not only did they transmit messages in code, but they added a nice little touch, all transmissions were forwarded in their native dialects. Both my father and I would chortle at the prostpect of some enemy intercept trying to figure out Cherokee.

    It makes me wonder, especially when you consider the costs of snooping everone's transmissions ... if it just wouldn't be too expensive if we not only encrypted our transmissions, but perhaps had an IRC in which we could roll our own dialects via tools like Bison in which only you, and your buddy on the other end would possess the necessary grammar file.

    Sure, I'm sure the employer and their lawyers could still crack it ... but perhaps the process would become so expensive that they'll just move onto hammering the putz down the hall who continues to spew open text.

    1. Re:codetalking ... by ImaLamer · · Score: 2

      This would be similar to a one-time pad.

      The best way to encrypt communications would be to write a one-time pad and hand it to your buddy everyday. [maybe you e-mail from home it in the morning using PGP?].

      But we are getting off the subject. One aspect is the fact that your IM's become court record. The other aspect is the fact that your employer doesn't want you to do something on their computers.

    2. Re:codetalking ... by abulafia · · Score: 1

      The best way to encrypt communications would be to write a one-time pad [...] [maybe you e-mail from home it in the morning using PGP?].

      That is moronic.

      If you think you need the theoretically perfect security of a one time pad, why would you send it using PGP?

      Of course the data security needs of wasting time gossiping with pals doesn't require OTP security. Hm, maybe bundle a couple of thoughts and send it out with PGP instead?

      But then, I've never understood the allure of IM.

      -j

      --
      I forget what 8 was for.
    3. Re:codetalking ... by Anonymous Coward · · Score: 0

      If the dialect was "fixed", so "the" always transformed to "xyz", then they'd decode it pretty quick.

      If the dialect was meta-stable, so "the" was "x" one time, "abcd" next, then it can be made much harder. This is pretty much what we could call an encryption algorithm. But then, why not just use any good modern alg. like Blowfish, Twofish, Serpent, AES, etc. etc.

      If the dialect was un-stable, so "the" was "x" one time, and "abcd" the next, all creatively chosen from a CD, or DVD, of shared white noise; then you have a one-time pad. A few GB of shared white noise is good for one hell of alot of secret IM'ing. All for want of a postage stamp.

      Not all crypto analysis techniques need the algorithm to break the code, but having it can't hurt the effort. So, if you try your hand at DIY encryption, be very careful and, contrary to popular opinion, keep the algorithm between you and your friend.

    4. Re:codetalking ... by ImaLamer · · Score: 2

      My point is this:

      Code talkers are using a OTP because only they knew it. It couldn't be analyzed and it was never broken.

      The OTP sent from home in the morning would let you both go to work or whatever and use it.

      Why not just use PGPhone?

    5. Re:codetalking ... by shaldannon · · Score: 1

      Code talking isn't, I don't think, a true OTP, since the same "encryption" algorithm is used every time. Call it what it is: a translation. It's scarcely different from expressing the same phrase in ROT-13. It's no different at all from expressing the phrase in Spanish, except that the population that can decode it is smaller and known. As a matter of fact, all code talking is is security through obscurity. The fact that the Japanese had no way of translating the language just means it worked :}

      That said, I have to agree with a previous poster on this thread that using a OTP encryption over an IM client is really quite lame. If you really need that kind of security, there are other forms of communication available to you.

      Now, I don't agree that an employer should be monitoring your IM logs/email/calls/etc., unless he has cause to track you (e.g., your productivity has seriously dropped, or he thinks you're doing something illegal on company time). Besides which, I suspect that IM conversations are the least drain on someone's productivity...I'd guess Minesweeper/Hearts/Freecell/Solitaire and surfing the web are the biggest drains. I'd like to see some scientific studies on the subject. But then, I've had bosses who espoused the "you are adults" philosophy and the "you can't do anything" philosophy. *shrug*

      --


      What is your Slash Rating?
    6. Re:codetalking ... by abulafia · · Score: 1

      Sorry, you're just wrong. A one time pad is pure random data. One XORs the data with the message. It is mathematically impossible to decrypt without a copy of the data used, because every possible decryption is equally likely.

      Code talkers were speaking a language. Speaking a language in no way can be compared to employing an OTP. Someone not knowing the language could have, in time, learned it through a variety of methods. They just got lucky that the Japanese didn't have time time or the will to do so.

      Check out http://pubweb.nfr.net/~mjr/pubs/otpfaq/
      for more information.

      -j

      --
      I forget what 8 was for.
  57. RATE A DICK,GET ASS RAPED,THANK CMDRACO AFTERWARDS by Anonymous Coward · · Score: 0

    Please go to www.ratehisdick.com and rate the thegiver (the giver as in from www.goatse.cx) a 10. Thank you everyone, especially trolls for introducing me to Goatse.cx

  58. Re:First Post by Anonymous Coward · · Score: 0
    $3 billion US tax dollars go in aid to Israel every year. That's more than you'll ever earn in your life, going towards a country which:
    • Only exists thanks to the support of Western nations;
    • Only continues to exist thanks to the support of America.
    ...and would otherwise have its citizens pushed into the sea, by a random set of Arab countries.

    To say the ultimate expression of worth is capitalism, is a good sign of your weakness. Capitalism protects the weak with their namby pamby "property rights" so their little houses don't get taken over by some serious Might. By the ultimate expression of worth, Israel is full not of dogs -- but dead dogs -- offspring of penniless refugees whose very existence is thanks to the benevolence of other nations.

    Meanwhile, the Arab countries were and continue to be the source of endless wonders in civilisation -- from architecture as witnessed in the Alhambra, to mathematics (guess what, every time you write a number down, you're using Arab-sourced notation!), to a big, fat, oil source, which can be used to cripple the economy at will.

    The only reasons for America to support Israel today are a few whiny Jews in New York and a desperate last hope at a friendly country in the Middle East (hard when everyone hates ya, isn't it?). And, no surprise, the only country with no balls or even ability to stand up for itself, is the first to run to America's call -- Israel.

  59. Rubbish by cygnusx · · Score: 2
    From the article: "[Monitoring] changed the employee behavior. Their productivity went up," she said. "They were a little bit more careful with their communication. It will be the same with IM."
    Yeah, it changed it all right. Now they're back to office flirting and gossip via good ol' F2F, the water cooler, and little pieces of paper.

    What's next? X10 cameras in the workplace? :-)

    Say, all the productivity benefits of 'computerization' couldn't have been due to the freedom people using them found to work at their own pace, could it? It's unthinkable that a guy is *more* productive for next two hours after a 2 minute IM conversation with his girlfriend, I guess. Nah, let's watch over every damn move they make. Make 'em think before they pick their own nose. That'll improve productivity, all right!

    Props to all BOFHs. You have a long and prosperous future ahead of you.

  60. Rights at work? by Anonymous Coward · · Score: 1, Interesting

    Our company's policy is as follows:
    1) the computers and networks are company assets
    2) company intends for employees to use computers and networks for company business
    3) company may review or monitor any activity on the company's computers and networks.

    So don't do non-business stuff at work. What's so hard about that?

    1. Re:Rights at work? by Anonymous Coward · · Score: 0

      what is your company specializing in? flipping burgers?

    2. Re:Rights at work? by Anonymous Coward · · Score: 0

      try working 18 hours a day and be an only parent of 2 children and you tell me how to NOT do some non-business things at work.

      most 9 to 5 places are open, oh my gosh, between 9 and 5 .... oooooo ... I think I can squeeze going to my home back with my 45 min commute and get back in time to work from my lunch break .... oh wait thats a 45 min commute one way ..... remember you cannot apply your life style on anyone else, you do not know what is necessary and unnecessary for another individual .....

      if anyone who has read this article is complete agreement then please feel free to move to China, you will fit right in... mmmkay

  61. True and i agree by Anonymous Coward · · Score: 0

    But boy are you preaching to the wrong crowd - these are people who object to paying money for anything and think free is a way of life.

    Being restricted is against their religion -(admit OSS is a religion to some of you guys -its better for you) and they will flame anyone who disagrees - and at the same time they can all tell you what the picture looks like on goatse.cx and where to find the best porn ?

  62. Not interesting and not true by Anonymous Coward · · Score: 0

    Wrong - you can't sue them - anything written on company time and company equipment is company product and this extends to all you mentioned - its been proven several times in the courts across the world - do a bit of research before posting this stuff

  63. Re:First Post by Anonymous Coward · · Score: 0
    Most of the commerce that Israel engages with is not with the US, its with the EU.
    It certainly does no trade with me, an EU citizen! And I keep my list of Israeli "settlements" in case I have any doubt as to whether a company operates out of occupied territory. I try to spread as much awareness as possible -- slowly the EU is speaking out with the UN against Zionism.
    Arms would willingly be sold by Russia if we really wanted them to second source their arms.
    But when they're donated by the US, when Israel basically exists as an outhouse for the US, defended by the US, why would they pay money to get them from anywhere else?
    They can fend for themselves; they are an undeclared nuclear weapon power, so they have the MAD switch.
    Again, they are a nuclear power because the US gives them such technology. Any "strength" is neither their own nor the product of their minds, but the product of US donations. The word here is not "cockroach", but "leech".

    At least I know no Israeli nuke will ever suck the paint off of my house, I expect some stupid fucking Arab to try and pull that off.
    So, what you're saying is, that Israel is absolutely nothing without the US, and could never stand up to it. Others don't assume eternal subservience. You like Israel is because it will exist only to serve you. Thank you for your honesty.

    Point 5 is unqualified. You'll find that most Western countries come out against support for Israel, but accommodate for America. The Cold War is over, get over it.

    Point 6 requires a rehash of the above. Give me a big enough weapon (not sell, give) and I can destroy you, no matter how stupid my intelligence is. All I have to know, is how to point it, and where you live.

    The real geopolitical imbalance in regional power is corrupt, militant, terror sponsoring dictatorships and fascist suppressive Arab governments

    Corrupt - US gov - check. Militant - US gov - check. Terror sponsoring - US gov - check (most evidence can be taken from South America). To consider most Arab governments "fascist and suppressive" suggests you've never even visited an Arab country. Excepting Iraq, how about staying in one a few days.

    I happen to read quite a bit of scientific Journals in my meanderings, and I see no Arab scholars contributing shit to anything, particularly in the last few centuries
    You've read and understood a broad range of scientific journals for the past few centuries? Quite. A little learning is a dangerous thing. Go on, do yourself a favour, learn something about what the Arab world does.
  64. Re:Alternate - Very funny - but in all seriousness by Anonymous Coward · · Score: 0

    I came here for support. I hope you can help

    Well, perhaps someone could find it in their heart to mod you down to -1...

  65. Traffic analysis by driehuis · · Score: 5, Informative

    Even when you encrypt your traffic, it will not protect you from traffic analysis.

    I happen to be the dude in between management and the users on my site. I refuse to eavesdrop on my users. Not all of my users realize it, but we've got a pretty liberal policy (don't break the law, don't be offensive to others, don't use excessive bandwidth during business hours; that basically sums it up).

    Some of my users know me for cracking down on porn or MP3 downloads, and think I'm reading their every keystroke. Because if I wasn't, then how would I know that they were doing stuff that they weren't supposed to do?

    The reality is, when I get complaints about Internet performance, I run some quick scripts on the logs to find out who is hogging the system. If, after eliminating the obvious business use connections, I'm left with a top ten and number two is downloading a gazillion of .xls spreadsheets from an server in Poland and all the URL's have /..%20%20/ in the path, I give that user a call.

    Usually, the user will accept the lecture that his contractual obligation to stick to the corporate guidelines is not optional. I sometimes learn through the grapevine that such a user thinks I'm a fascist. So be it. If other people can't work because of egregious abuse, I have to intervene.

    Do I even look at the stuff they're downloading? Not if I can avoid it. The only times I look at what they're downloading is when they start yanking my chain, giving me the go around that there is no law against downloading Warez or porn. Maybe there isn't, I've got no clue. I do know what's in their contracts though.

    Most of these issues are dealt with amically. People sometimes don't realize how big their impact on the corporate network is, and even if they do I usually let them get away with it if the abuse stops. They're usually pretty happy when I tell them I've got no clue what they were downloading, but could find out when forced to.

    Over the last year, IM became a bit of an issue because of the way their stupid tools communicated (if only they used persistent connections they'd fly right under the radar). At some stage, 30% of our proxies capacity was used to serve a few dozen IM sessions and it really started to hurt web performance.

    It's always funny when they let it escalate to management level, and I can at that stage let them rant about the invasion of their presumed privacy, and then drop the bombshell that I didn't even look at what they were downloading, and that it was trivial traffic analysis that gave them away, and that the reason they were in that meeting was because they incriminated themselves.

    --

    Bert Driehuis -- All I asked was a friggin' rotatin' chair. Throw me a bone here, people.

    1. Re:Traffic analysis by richardbondi · · Score: 1

      Just want to say I think driehuis' approach strikes exactly the right balance between privacy and corporate interest. It would be even worth writing up as a model policy; I guess the fundamental principle would be to use first bandwidth analysis, then only if necessary traffic analysis, and finally as a very last resort actually looking at the actual user's traffic content.
      Best,
      r:b:

  66. trillian... by Anonymous Coward · · Score: 0

    has blowfish encryption for yahoo messenger, aim, msn and icq. why not use that? .. i do.

  67. How 'bout encrypting the traffic? by rickthewizkid · · Score: 1

    I wonder how long it will be until someone creates a client for AIM or ICQ etc, that encrypts the traffic going over the network using something like PGP so that even if your boss DOES have your or the other person's public key it will be impossible to read.

    It's kinda hard to monitor when all you see is GHYP FPTHG FTHGF EGGEEG going by.

    Or, I could create one using ROT13 encryption and then sue the pants off of the first company to "hack" my advanced confidential encryption system &ltsarcasm&gtthanks to the DMCA of course...&lt/sacrasm&gt

    Just my $0.02
    -RickTheWizKid

  68. Re:Not interesting and not true (OT) by hyrdra · · Score: 2

    This is totally untrue. Companys pay employees to work and provide a certain function, they *DO NOT* own them. This was discussed on Slashdot a few weeks back. Just because you are getting paid to do task A, and you do task B doesn't mean the employer owns whatever B is. At best it means you are a poor employee.

    Now they can own everything you do when you are under a contract that specifically states this (although it's rare and hardly inforceable, similar to contracts that force you to waive rights in sexual harrasment areas in favour of company appointed arbitration).

    It helps if you think of companies as people, which is kind of what they are legally. If I hire you to paint my house, and you instead work on a product that ends up selling millions, I would have no claim to that product. I WOULD have a claim to any damages I lost as the result of your working on this other task and for whatever I paid you if I can prove you didn't do your job.

    --


    "I'll just chip in a bit for RedHat: I actually have that installed on my university machine." - Linus, '95
  69. Moron! by Anonymous Coward · · Score: 0

    You jackass. Slashdot gets all their stories from other places.

  70. GAIM + PGP by kenthorvath · · Score: 2

    I always thought that it would be a nice feature for some of the open source AIM Clients to include automatic public key encryption as an option for those clients that support it.

  71. Block 22? Use 443 by wowbagger · · Score: 3, Informative

    If you have a server you control, and wish to be able to get an SSH session through a firewall that blocks the "standard" SSH port, place your SSH server on port 443 (https) - both are SSL, and most firewalls will happily let you establish the connection.

    That said - It's not spelled Foxtrot Uniform November, it's Whiskey Oscar Romeo Kilo - if you want to download porn or waste lots of time IM'ing, then do it at home. A quick scan of /., Freshmeat et. al. while waiting for a recompile is one thing, burning huge amounts of bandwidth downloading crap it another.

  72. problems facing prosecuters by Anonymous Coward · · Score: 0
    1 - there is no official way to authenticate a human user to an (icq) number


    2 - IM accounts are easier to hack than my own notebook


    3 - Whenever I look at my IM history, i find it a pain in the ass to find anything. people send a lot more IM messages, the messages tend to be more cryptic, and 50% of the time heaps of words are spelt incorrectly, so the odds of a bot being able to find what it REALLY needs is going to be dramatically reduced.

  73. Encrypted IM is availible. by Anonymous Coward · · Score: 0

    Trillian [ http://www.trillian.cc ] will do 128 bit encryption over AIM and ICQ... but only with other Trillian users. I use Trillian anyway, just because it combines so many clients into one. It may be possible for other clients to support Trillian's encryption in the future.

  74. WTF by Anonymous Coward · · Score: 0

    god, you are using company computers on company bandwidth on company time (probably), shut up

  75. Trillian and SecureIM by Merconium · · Score: 1

    Trillian allows users to connect over AIM and ICQ using a 128bit SSL.

  76. Re:Not interesting and not true (OT) by anthony_dipierro · · Score: 3, Interesting

    Companys pay employees to work and provide a certain function, they *DO NOT* own them. This was discussed on Slashdot a few weeks back.

    The discussion a few weeks back was about work created outside the office. If it's related to your job, or it's done on company time, chances are it's owned by your company.

    If I hire you to paint my house, and you instead work on a product that ends up selling millions, I would have no claim to that product.

    That's not an employer-employee relationship, thus it's subject to different rules.

    Contractors by default have their works owned by them. Employees by default have their works owned by their employer.

  77. Trillian and SSL by racerx509 · · Score: 1

    Just use Trillian and SSL encryption. Fixes that problem.

    --
    13 year old white supremacists are shitty web designers.
  78. And I... by Anonymous Coward · · Score: 0

    ...will respond with an oralse link when they do

  79. Chill by Anonymous Coward · · Score: 0

    MP3

  80. Re:Not interesting and not true (OT) by CodeMonky · · Score: 2

    Unless I use your paintbrushes and paint to come up with the new invention, which is normally the case with these "you created X on our time". You are using company resources to do create this magical product. Its one thing to do it on your own time on your own machines, a completely other to do it on your employers time on your employers machines.

    --
    --"Karma is justice without the satisfaction"
  81. No clue by Anonymous Coward · · Score: 0
    The original comment obvious came from someone with no clue about how large businesses (and universities, I'm guessing) work today. Many large companies do a lot of conference calls and net-based whiteboard presentations, and having IM capability lets participants use a "back channel" during the proceedings. This can be a very useful tool in some circumstances.

    Another common use is simply to find out if someone is in their (distant) office before calling them, or even instead of calling.

  82. Companies might be required to do this by treat · · Score: 2

    SEC regulations require that trading firms keep records of all email and instant messaging. There are severe fines for noncompliance. Any business that falls under these regs really has no choice but to spy on their employees.

  83. You still don't get this by pauljlucas · · Score: 1
    Freedom of speech is also the right to not have another person restrict your speech, otherwise it is no freedom at all.
    Wrong. Freedom of speech only applies to the government. If you still disagree, cite the relevant section of the US Constitution that says anything about employers.
    Why is the employee/employer relationship entitled to so many exemptions from the basics of every other element of society?
    You've got this bass-ackwards: it's the government that's got the exception.
    What if a non-employer corporation sought to restrict the speech of people?
    And how exactly would they go about doing that? Tell me how, say, Walmart (for whom I do not work) could possibly restrict my speech (short of them suing me for for slander or them having me arrested for ranting and raving inside one of their stores)?
    --
    If you reply, do so only to what I explicitly wrote. If I didn't write it, don't assume or infer it.
    1. Re:You still don't get this by The+Cat · · Score: 2

      If you still disagree, cite the relevant section of the US Constitution that says anything about employers.

      An amusing red herring, but beside the point. The original statement stands as written. Freedom of speech is meaningless if society chooses to countenance its restriction by any agency, government or not. The same goes for privacy, due process, and the rest of the Constitution.

      It applies to everyone, or it is meaningless.

      Tell me how, say, Walmart (for whom I do not work) could possibly restrict my speech

      1) You can't use the term "$Company Name" because it is trademarked.

      2) You can't criticize $Company in public because it hurts their business.

      Either of these can be enforced by fiat because the average citizen will choose not to litigate for the right to make an offhand remark. Nevertheless, these are both unjust restrictions on speech.

    2. Re:You still don't get this by pauljlucas · · Score: 1
      An amusing red herring, but beside the point. The original statement stands as written.
      It doesn't stand just because you say it does. Proof by repeated assertion doesn't work.

      Another example: no newspaper (a private company) is obliged to print what you want to say. They can not print anything they damned well please.

      You can't use the term "$Company Name" because it is trademarked.
      The company isn't imposing that restriction: the government did when congress enacted trademark law.
      You can't criticize $Company in public because it hurts their business.
      I certainly can criticize them if my criticisms are factual. Libel and/or slander don't apply in that case.
      --
      If you reply, do so only to what I explicitly wrote. If I didn't write it, don't assume or infer it.
    3. Re:You still don't get this by The+Cat · · Score: 2

      The company isn't imposing that restriction: the government did when congress enacted trademark law.

      Yes, but the company enforces it.

      I certainly can criticize them if my criticisms are factual. Libel and/or slander don't apply in that case.

      A deft sidestepping of the original example. Whether or not the criticism is accurate is beside the point. The company can suppress a person's speech through litigation, which the average citizen will usually try to avoid. The result is a chilling effect on free speech, if not an outright suppression of it.

  84. Wireless Always IM is coming by tstiehm · · Score: 1

    There are a number of companies that plan on coming out with Wireless IM/E-Mail/Web much like RIM does wireless, always e-mail and with VoiceStream you can get Wireless Always on AIM on your cell phone. The Hiptop is one thing that comes to mind. Soon you will be able to IM and E-Mail personal stuff at work all day long and it won't pass over your employer's Network all for $20-40 dollars a month.

  85. Well, they own the bathroom too ... by cascadingstylesheet · · Score: 2, Interesting

    ... and the stalls, and the seats, but I sure hope you don't think they can/should install webcams there, for the sole purpose of monitoring excessive bathroom breaks, of course.

  86. One line sums it up by freeweed · · Score: 2

    If we cant push our boss around like I used to be able to (the company went backrupt in the .bomb)

    :)

    --
    Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
  87. You have no rights by Anonymous Coward · · Score: 0

    Your employer owns your time. Your employer owsn your thoughts. You are a slave.

  88. http://gaim-e.sourceforge.net by Anonymous Coward · · Score: 0

    At the moment the project is in the early phazes of development, but it is promising. You all might want to consider looking into it.

    gaim-e is a plugin for Gaim (gaim.sourceforge.net) which is an AOL IM clone for Linux. It uses the gpgme library for encrypted communications over IM.

    Please note that I am not the developer, I am just a highly interested user of the project's code.

  89. Re:encrypting won't stop you from getting in troub by Anonymous Coward · · Score: 0

    > encrypting your sessions would raise their
    > suspicions even higher.

    Yes, quite likely unless the act of encrypting the data was natural to the user interface, or you could say you use encryption firstly to protect info exchanged with your own Corporate pals. (Well, should you ever, possibly, come to actually exchange info with your Corporate pals, then you'd be ready, wouldn't you!)

    > that worried that you feel you should have
    > to encrypt, you probably shouldn't be doing it

    I happen to think people should encrypt everything that passes over public channels, sensitive or not. The founding fathers (US) used codes when sending messages through the postal service. History has had its share of clandestine postal intercepts. Never underestimate an those with survallance powers when you stand between them and their own agendas.

    What Carnivor operator wouldn't be tempted to use the facility to protect his Mother's cottage livelyhood from that "evil competitive b*ch" down the street? Who'd find out? Who'd care? Now, take that feeling of self-serving rightousness and magnify it to the level of "national security". Like how to give Enron everything it needed to do such a bang up job at fleecing the unsuspecting. Do you think any given person with access to the tools would stand by and possibly lose everything on the basis of some "guideline"?

    So you encrypt because decryption still takes more work than an individual with a 'tude simply reading plaintext. Or some network tech with a sniffer broadcasting the latest corporate confidential dirt around the water cooler.

    Encrypt it, encrypt it all! Encrypt strongly enough that NSA decryption computer services will have to be requisitioned, at least. Better yet, encrypt strongly enought they'll actually have to have a legal basis to involve you with getting the key. (Gee, what a novel thought... Innocent until proven guilty.)

    Strong encryption, it's your duty as a free citizen.

  90. we the people? by Anonymous Coward · · Score: 0

    the original founding father are rolling over in their graves. this country was founded by the people and for the people. remember it is supposed to be citizens first! capitalism is not a form of government, therefor capitalist should never govern anyone. this will settle where the true power of the US citizen is, everyone who doesnt like how our companies treat us the please save enough money to not work for at least 3 months, then site back and watch your cruel boss, your heartless company, and your slavedriver minded peers piss in their pants when the shit hits the fan. as individuals we cant say much because capitalists have seen fit to manipulate employment laws to their advantage, but together we can do something about it, THIS IS OUR LAND and OUR COUNTRY. WE THE PEOPLE as the true purveyors of LAW by our VOTES are the ONES who give final permission about WHO and HOW companies do BUSINESS ON OUR LAND ....... THINK PEOPLE!

  91. Re: Yea, the profit angle was a cooky conversation by Anonymous Coward · · Score: 0

    A slightly different angle, not Corp trying to profit from employee, but the fact IM traffic flows through a frigging NEWS organization! True story follows...

    Dateline about 1 year ago. Meeting attendance 2 VPs of IT, 1 Business Unit Exec, 2 Sr. Product Managers, /Me (an all powerful Enterprise Architect). Place a large US company.

    Exec: We want IM on all manager's terminals.

    IP VP 1: No problem. /me, what will that take?

    /Me: Um... Um... Ya know, AOL/Time Warner is a MEDIA company. You know, CNN and all. And, Um, you're a big NYSE company. Isn't it a problem that everything you'll be talking about will be going outside the company, and through their systems?

    IP VP 2 (my boss): What's the problem?

    /Me: So, its Ok with you when CNN stories talk about rumors of upcoming layoffs, new products, aquisitins, announcements, etc., etc.?

    Exec: I don't think they'd do that, but we need another meeting, we need more work on this. Leaves.

    /me: We could set up something like an IRC server, in-house. Pretty much free, clients run on windows. I can have it running on my proto-server (personal Linux box) after lunch. Or, maybe we can buy the technology from AOL.

    IT VPs: Oh, we wouldn't want to support that. They want IM, we'll just have to let them know the risks.

    /me: Fine.

    Shortly after, "Security" put out a memo "banning" IM. IM traffic quadrupled. At least, the Exec stopped using it, says he found it "annoying". I guess that's why he gets paid the big bucks.

    Stupid. Just Stupid.

  92. another article on IM privacy by feed_me_cereal · · Score: 3, Informative

    For those interested, salon had a simmilar article a few days ago.

    --
    "Question with boldness even the existence of a god." - Thomas Jefferson
    1. Re:another article on IM privacy by Anonymous Coward · · Score: 0

      It is spelled "similar".

  93. What's with this stupid double standard? by kcbrown · · Score: 2
    So they monitor email. And instant messaging. And web browsing. And they "downsize" you if they find that you're using them for personal use.

    Do they do the same thing with the telephone?

    No?

    That, ladies and gentlemen, is a double standard. Also known as hypocrisy.

    Oh, they do monitor your phone conversations? Fine: do they "downsize" you if you use the phone for personal use? No? Then lather, rinse, and repeat.

    Oh, they "downsize" you if you use the phone for personal use? Who do they think they are, the NSA? What do they think you are, a slave?

    If they're going to treat you as a slave at work, then they can fuck off when you're not physically at work: you should refuse to give them the benefit of any thoughts, ideas, or efforts that don't originate at work. And if they press it, then you should be able to bring them up on criminal charges (slavery is against the 13th Amendment of the Constitution, and it doesn't matter whether or not you're being paid: slaves were "paid" in the form of food, too).

    --
    Use 'slashdot stuff' in the subject line in any email you send me if you want to get past the spam filter.
  94. employees have no right to screw off by maxpublic · · Score: 2

    This seems rather apparent: employees have no right to screw off on the company dime. Although self-evident to anyone with half a brain, I still hear people - mainly younger folks fresh out of college and new in the workforce - complain about their 'rights' at work, or assert that without unmonitored internet access they'd somehow be crippled when it comes to 'creativity'.

    First off, employees don't have the 'right' to dick around on the web or IM when they should be working. I pay them to work and I define what 'work' is; and that isn't it. Second, if they truly can't function without wasting *my* money goofing off for part of the day, then they need to get a job someplace else. I can and will replace them with someone who isn't hampered in terms of 'creativity' when they actually have to put in eight solid hours of work a day. Especially in this economy, it's damned easy to fire the whining kid and hire someone with an actual worth ethic.

    I don't see what the problem is with a company monitoring things like IM. You're at my business, using my equipment - I'll monitor whatever I please in any fashion I desire. If you want to hold private conversations with friends or surf the web, do it at home on your own time.

    Max

    --
    My god carries a hammer. Your god died nailed to a tree. Any questions?
  95. Re:First Post by Anonymous Coward · · Score: 0
    Here in the US, we have Alabama to New York. We don't ditch the problems of the poor and undesirable south.
    Fat lot of progress you've made there, lol! The chance to join the EU is an incentive for Eastern European economies to improve. Meanwhile, the Bible Belt etc in the USA will remain the laughing stock of the world.

    The US does not donate. They are sold. You are wrong.
    How about doing (link #1) some (link #2) research (link #3) you fucking retard. Particularly read the last link, to find out how Israel gets its weaponry.
    Any western country would be terrorized by the Arabs.
    Then why isn't it, idiot? Why is the last time we've had an Arab terrorist attack Lockerbie, and that was in retaliation for CIA assassinations in Libya? Fact is, Arab countries dont attack Europe because Europe doesn't abuse the Arabs -- Israel does.

    The US government is an order of magnitude less corrupt than any other on the planet. An order of magnitude. Its far from perfect, but this is a crock. Sponsoring terrorism?
    Thanks for that scientific measurement of corruption. I cannot name a Western government which takes more and gives back less to its population. Oh yes, it gives you the freedom to run around with guns. A murder rate 10 times higher than where I live... must be awful, I feel sorry for you.

    we are a gentle giant taking a lot more punches that we EVER had to
    The US has had shit for punches.. that's why you acted like the sky was fucking falling when someone knocked over two of your buildings. I mean, what kind of retarded country advises its citizens to RETURN to their offices? And saves money on skyscrapers by building all support through the outer walls? And that was only 3500 people, likely much less had you not been so stupid in your dealing of the matter.

    And when was the last time you were invaded on actual US territory? By Britain, well over a century ago. You, your parents, your grandparents, and their parents don't know the fucking meaning of war, LOL.

    Most people who come to live, come to stay, forever, and try to get their families here as well.
    There's an interesting statistic. A great deal of my friends in America are planning to move out as soon as possible, but then, one's brother worked at the Pentagon, and was 5 minutes off being killed because your STUPID military couldn't even fucking defend their HQ.

    I stayed in America for a month, honestly considering moving there, and the experience turned me off completely. You're like a bunch of fucking monkeys throwing shit at each other, the most uncivilised Western country I've been to.

    I'm not going to bother following this thread any more, because it's clear by my needing to provide links for basic statistics that you are completely uneducated on the topics you're trying to discuss.

    I will, however, without your permission, forward your posts, as one of the best examples of why the world laughs at America. Thank you for this entertainment factor. Enjoy your week.

  96. Some perspective here by coyote-san · · Score: 2

    What planet are you from?!

    You worry about what your boss tells you to do while on the job.

    I'm worried about a boss having the legal right to fire employees because they're gay. Or they're not married. Or because they're married, but don't have kids yet. Or they do have children, but aren't married yet.

    You worry about the boss blocking web sites at work.

    I'm worried about a boss firing people because he came across evidence that they went into an adult bookstore... or even just an R-rated movie. Or the "wrong section" of a very good bookstore. (Think Tattered Cover in Denver, or even a Border's with a large section on human sexuality or other "controversial" subjects.)

    You worry about the boss keeping people from talking politics during their lunch break.

    I'm worried about a boss deciding to fire people because they're politically active "for the wrong causes" on their own time.

    You worry about employers controlling every word a person types on the job.

    I'm worried about employers demanding the IP rights to everything an employee does AT ANY TIME while an employee. Including projects they developed at their own expense on evenings and weekends. This attitude was common a few years ago, then got beaten back in the courts, but seems to be making a rebound.

    Finally there's the whole drug-testing issue pushed by the feds. I do not support someone working while high. But I don't see how firing people at random because of false positives (since everyone except the DEA understands that these tests are not perfect), or for going to the "wrong concert" on the weekend (where others are smoking and you pick up some second-hand smoke) will make the workplace safer.

    You may think my examples are made up, but they're not. Most states have "hire at will" laws and employees can be fired for any reason, or none at all, without prior notice. Only a handful of reasons can't be used, and it's virtually impossible to prove that the true reason for your termination was one of these excluded reasons.

    --
    For every complex problem there is an answer that is clear, simple, and wrong. -- H L Mencken
  97. Re:First Post by Anonymous Coward · · Score: 0

    But, sadly, troll, our economy is and always will be larger. Shit gets done here.

    The US gives money to quite a few countries, Israel is one of them. We do not "donate" weapons.

    Murder rates are regional here. We put monkeys like you in slime pits so you can fuck and do drugs while the rest of us work. So Compton LA is the land that everyone forgot by design. We don't have to go around forcing a standard of mediocrity, we focus on excellence.

    Arabs have a millennium of Abuse behind them, tool. As the people of Constantinople how they liked it when it was ransacked and turned into Istanbul, or how the Indians liked the Islamic terrorist trying to invade their land. Or ask Russia how fun it is to deal with Arab fundamentalism. The use trench mortars in Moscow just the other week.

    I looked at your links, since you don't read, I never said that the US didn't give AID, we don't donate weapons. Retard. I'm glad we can pick and choose our friends, and not have to band together with the next asshole to "get the job done."

    Keep up the snarky attitude fuckhead., The economy will grow, our will dominate, and you will lick the boots of the only superpower left to keep you driveling dogs inline.

    The EU is an elitist piece of shit, the EU buttfucked the eastern European countries. It should be called the "Western Europe Country Club."

    Granted, I love a long vacation to Italy, Greece and Turkey, I've been several times. But I have no delusions about where I would raise my kids.

    And while we have the bible belt as the "laughing stock," whose GDP is probably still larger than whatever pissant dump you infect, we don't turn our backs on each other like the EU shits do, United we Stand bitch, try us on for size.

    Go back to your cave, snark. I just love people who minimize the positive things that the US has done, and deny that trickle down hasn't worked wonderfully for the rest of the world. Those who stand in line do quite nicely, those who resist, well, the go to the back of the line.

    How does it feel to be all they way down there? At the back of the line? I imagine its frustrating and you have to create propaganda for yourself to convince yourself this place is somehow "evil" (what a laugh.) It easier than accepting you are inferior, knowing you have a lot to learn and long way to go.

    Means less competition for me anyway, not that I need any breathing room, I do quite well for myself. You could have been my own worst enemy in an economic sense, but walking around in a paranoid delusions makes things more fun for me, loser ;p
    (I work with an Australian, Canadian, Iranian, German, a Turk, a Bengali, a person from Russia, a person from India and finally an Italian. They are all here for a very good reason, and are not ashamed to admit it. Sure they miss home, but the bottom line, is they know where the money is at.)
    HAND.

  98. Re:First Post by Anonymous Coward · · Score: 0

    Don't know the meaning of fucking war? Last I checked youd be speaking German if it wasnt for the US you insolent shit.

    Check out how fucking nasty Germany is to its NATO ally, Turkey. Its pathetic you euroscum only invoke the big boys when you need them, then piss into the fucjking wind the rest of the time.

    In the bloodiest months of WWII, 80,000 germans were killed and 15,000 US troops. You think fascists or socialists or communists can beat the free world! HAHAHAHAHA. Lol. Fat fucking chance, go ahead and try.

    Do you know how dumb you sound?

  99. Saudi Diplomat Praises Suicide Bombers in Poem by Anonymous Coward · · Score: 0

    Nice friends you have there, scum.
    ---
    Saudi Arabia's ambassador to Great Britain has offered his unequivocal support for Palestinian suicide bombers while slamming the U.S. in the process, undermining claims by the Saudi embassy in Washington, D.C. that its government does not support the tactic.

    "May God be the witness that you are martyrs," Ambassador Ghazi Algosaibi wrote in "The Martyrs," a short poem carried on the front page of the London-based Arab language newspaper al-Hayat on Saturday.

    "You died to honor God's word. (You) committed suicide? We committed suicide by living like the dead," the Saudi diplomat continued, according to a translation obtained by the Associated Press.

    Algosaibi's poem praised one recent female Palestinian suicide bomber by name: "Tell Ayat, the bride of loftiness ... She embraced death with a smile while the leaders are running away from death. Doors of heaven are opened for her."

    "Ayat" is a reference to 18-year-old Ayat Akhras, who blew herself up at a Jerusalem supermarket two weeks ago.

    Algosaibi also took a rhetorical shot at the Bush administration, saying, "We complained to the idols of a White House whose heart is filled with darkness."

    White House spokesman Ari Fleischer argued uncomfortably last week that millions of dollars raised at a televised fund-raiser sponsored by the Saudi royal family on behalf of Palestinian "martyrs" would not go to help terrorists, based on denials from Saudi diplomats in the U.S.

    "The simple granting of money to the Palestinian people cannot, on its face, said to be support of terrorism," Fleischer told reporters.

    On its web site the Saudi's Washington embassy boasts of raising over $33 million for its Palestinian "Intifada Fund."

    Last week's TV fund-raiser, dubbed a "Terror-thon," by critics, collected pledges for $155 million. Various Saudi spokesmen have claimed the money will go for humanitarian relief

  100. Re:EU is condemned as sexist, racist and ageist by Anonymous Coward · · Score: 0

    April 10, 2002
    A member of the ceremonial guard falls over as Kofi Annan, the UN Secretary-General is escorted to a conference in Madrid City Hall on ageing

    EU is condemned as sexist, racist and ageist

    From Rory Watson in Brussels

    JACOB SÖDERMAN, the European Ombudsman, has accused the European Union's three main institutions of dragging their feet in stamping out discriminatory practices based on age, sex and race within their own ranks.
    All three forms of discrimination are specifically banned in the EU Charter of Fundamental Rights adopted more than a year ago. But, in his annual report, released yesterday, the ombudsman noted that the institutions had "not yet shown themselves to be serious about applying it in practice". He criticised the European Commission's "leisurely approach to dealing with a case of sex discrimination". The rebuke was prompted by the Brussels executive's failure to allow seconded national experts to work part-time.

    Mr Söderman had ruled earlier that the insistence on full-time work had amounted to indirect sex discrimination and had prevented a female British civil servant with an 11-month-old son from taking up the offer of a seconded post in the Commission.

    Both the Commission and European Parliament are criticised for continuing to apply age limits in recruitment notices and the ombudsman now receives a steady flow of complaints about ageism in the institutions.

    Mr Söderman has also called on the Commissiobn to address the small number of ethnic minorities among the EU's 35,000 officials.

    Last year, the ombudsman received a record 1,874 complaints, of which 313 were seen as admissible and investigated.

  101. IM Encryption Items by fuzzface · · Score: 1

    1) The various advocates of run FOO over SSL are missing a point. Sure you can encrypt the traffic to make it hard to read, but the messages are still in cleartext in the IM server. So, your boss might not be able to read it... but the person running the server certainly can.

    SSL only provides "on the wire" encryption. It doesn't prevent the server operator from snooping on you. We assume that the server operators are not logging our traffic, but do we really know ?

    And, even if the server operators are on the level (I have no data to suggest otherwise), you are only really protected if everyone you IM is also doing SSL. If you send something awful using your SSL-amped client to a non-SSL's coworker, your boss doesn't have to decode your transmission, he can just look at your co-worker's transmission.

    2) Having said that, users of a TOC (not OSCAR) based AIM client can do SSL quite easily. Get a copy of OpenSSL and stunnel on your system. Configure stunnel to accept a cleartext connection and forward it SSL'd to toc.oscar.aol.com. Then connect your TOC based client to the stunnel program. That works just fine because the AOL TOC/WWW server supports SSL.

    3) The only potentially "safe" solution, assuming your keybord/screen/mouse aren't being spyed on is to use end-to-end based encryption. Currently the only major public product out there that does this is Trillian... and I don't think the Trillian encryption code has been objectively reviewed to determine that their stuff really prevents snooping on the wire and at the AOL server.

    Cheers,
    Fuzz

    --
    %SYSTEM-W-ABORT, abort
  102. It's still your choice by shaldannon · · Score: 1

    If you don't like the rules, find another company. If you can't find a company whose rules aren't what you consider draconian, start your own. As others have observed: No-one *owes* you a job, let alone a job you like. If you get a job, great. If you have one you like, so much the better. If you have one you like and get paid handsomely, so much the better. If some of the factors don't apply, then change what is in your power to change or quit whining.

    --


    What is your Slash Rating?
    1. Re:It's still your choice by The+Cat · · Score: 2

      Yep. Anyone who complains or offers an alternative is a "whiner."

      Guess companies can do whatever they want. Employment is becoming no more than a (dubious) step above outright servitude... right up until the inevitable layoff (and right after the mortgage is signed, naturally).

      ...and people don't care.

  103. I didn't see you offer an alternative by shaldannon · · Score: 2

    Besides, if you want to complain about servitude and lack of rights, why not take on issues where that has meaning (DMCA, for example). Employment has always been about providing the necessities of life, and lately has included frills as well.

    Traditionally one farmed the land or ran a private business. If you look at how craft trade businesses ran, I suspect you'd find today's corporations to be benevolent in comparison (e.g., your boss doesn't whip you for being late to work).

    Modern corporations have evolved...I doubt anyone sat down and said "let's figure out a way to make the average worker suffer in dumb anguish." Dilbert makes the valid point that most corporate annoyance is a result of personal fiat and stupidity...not as an outright design to enslave you.

    My previous point still stands. You didn't offer an alternative, and you were griping about the state of corporate worklife. If you don't like it, there are alternatives out there (such as starting your own business, becoming a Catholic priest, trying to get on Survivor 5, etc).

    --


    What is your Slash Rating?
  104. I know people who got fired for it by mikesg8 · · Score: 1

    I personally have 3 friends who were all fired from a big five consulting firm for reasons directly related to Instant Messages. They were unsatisfied with their project and having what they thought was a private conversation, making some pretty explicit jokes about their bosses. Little did they know, their bosses were listening. They are unsure if they were being monitored, or if the bosses had people sneek on to their computers at night and read their log files (one or two of them realized, after it was too late, that they had their logging turned on). Either way, it was a pretty crummy thing to do, especially when the company was doing layoffs with severance, they found a reason to fire these guys for cause and give them no severance. They have all moved on, and since found less stressfull, higher paying jobs. But you better believe that none of them use IM at work anymore...

  105. And Trillian? by Snover · · Score: 1

    Trillian comes with built-in SSH (*gasp*) and, IMO, does a much better job of handling connections with the various networks (MSN, AIM, ICQ, YIM, IRC) and uses the OSCAR protocol instead of the outdated "public usage" protocol that AOL "provides" (read: was forced to do by court order). Not to say your experience differs, as it probably does, but I've found Trillian to be a breeze and INCREDIBLY nice.

    --

    [insert witty comment here]
  106. Re:The Truth About the White Male (Hint:Good) by Anonymous Coward · · Score: 0

    Trains, planes, cars, rockets, telescopes, tires, telephones, radios, television, electricity, atomic energy, computers, and fax machines. All miracles made possible by the minds and spirits of men with names like Ampere, Bell, Caselli, Edison, Ohm, Faraday, Einstein, Cohen, Teller, Shockley, Hertz, Marconi, Morse, Popov. Ford, Volta, Michelin, Dunlop, Watt, Diesel, Galileo, and other "dead white males."

    All reports indicate that we have a booming economy right now, but few understand why this is so. I hate to disappoint my friends on the radical left, but it has nothing to do with Bonnie and Clyde Clinton or the Democratic Party, or with any other party for that matter. What I'm about to say is tantamount to blasphemy in this politically correct day and age; yet truth is truth. How long are we going to pretend that origins play no role in our world, the origins of the inventions, science, technology, and economics of the world in which we live?

    Our present economic boom is due to the revolution in electronics and computer technology. But saying this is not enough, for these things didn't just spring into existence by themselves. They have traceable origins. And all of our "booms," throughout history, have the same origins as this one. It's no mystery. Just look at the list of names in your history books, and their national origins.

    The great majority of "booms" past and present have been brought about by the genius and inventiveness of that most "despicable" of genders, the dreaded white male, or, to be exact, by specific, individual white males. This is not to discredit the many contributions coming from non-whites, but fact is fact. Our most important and consequential inventions have come almost exclusively from white males.

    Curse me, or all white males, if you wish, that changes nothing. But if you call me a liar, you'll have to come up with the proof that I'm wrong. Remember, I didn't say there were no important contributions by non-whites; I said the overwhelming majority. Of course, I know about such things as the Chinese and gunpowder, but they didn't take it much beyond firecrackers and pyrotechnics. And I know about the pyramids and masonry of South America and the zero of the Arabs.

    Would we have atomic physics and electricity if it hadn't been for the ancient Greek philosophers who, for example, had the idea that all matter consists of tiny atoms? Aristotle (5th century, B.C., 25th century pre P.C.) used electric charges to treat gout! Archimedes perceived the center of gravity of solids, cylinders, and spheres. From the basic discoveries of Greek civilization it went to the Romans and after the fall of Rome, it passed to later Europeans who expanded on this scientific knowledge. In modern times these ideas were developed by such Europeans as Volta, Ampere, Watts, Bell, Edison, and Einstein, who provided the basis for most of the technical wonders of today. All of them dreaded white males.

    Maybe you got your enlightenment from one of the Ivy-League institutions of dis-education. Maybe they taught you that it's all the result of white racism and oppression. That every time a potential Einstein, Edison, or Ford popped up in the Third World, a White hit-squad would swoop down and eliminate him before he had a chance to prove himself. Or maybe their schools refused to teach him in the Ebonics of his day. Or maybe they didn't have proper daycare facilities. Or maybe our would-be innovator came from a "dysfunctional family."

    But the facts tell us that many of the great men pursued their genius at great personal risk--like the astronomer Galileo, who proved that the earth revolves around the sun. He and other men of genius and courage refused to be suppressed even if it meant their lives. They would permit no race, gender, group or class to keep them from their pursuit of truth and excellence whatever the cost.

    If you eliminate, suppress, or debase the while male, you kill the goose that laid the golden egg. If you ace him out with "affirmative" action, exile him from the family, teach him that he's a blight on mankind, then bon voyage to our society. We will devolve into a turd-world cesspool. Where has there ever before in history been a group of human beings who have brought about the likes of the Magna Carta, the US Constitution, and the countless life-saving and life- improving inventions that we now enjoy?

    Now it is certainly true that China did lead the world in technology and commercial inventiveness about 1,000 years ago. They had great coal-mining operations, gunpowder, six-masted sailing ships, and intense commercial enterprise. But it all collapsed because the elites, the long-nailed Mandarins, centralized control--1,000 years before Mao--and crushed the expansion and inventions.

    Does this mean we should sit back and let ourselves be governed by someone just because he's a white male? Of course, it doesn't. It means simply that we shouldn't suppress anyone, including white males. Let our God-given gifts run free in a free and just society, free from the oppression and tyranny of social engineers. If anyone has gifts beyond our own, be he a white male or other, be grateful. Maybe we have gifts that in some small way can contribute something of value as well. One way or another, we're all in the same boat. Few of us have truly outstanding gifts. And most of us have to humbly accept that there are others around who are more gifted than we are. In a democratic society it's not for Big Brother to decide who shall thrive and who shall struggle in the hive.

  107. Fatah threatens to blow up US Embassies by Anonymous Coward · · Score: 0

    Fatah threatens to blow up US Embassies and Kill Israeli Cabinet Families. Cute "freedom" fighters.
    Fatah's military wing last night warned that if Barghouti is harmed, the organization will target the prime minister and the chief of staff. "We know how to reach their homes," said the statement, which also warned the United States that if Barghouti is harmed, its embassies will be targeted overseas.

    *Warnings - and calls for the death penalty *

    Palestinian chief negotiator Sa'eb Erekat last night called on Israel to free Barghouti, charging that the arrest created a "serious obstacle" to the effort to restore calm, and that the PA regards Israel as responsible for Barghouti's well being.

    Former justice minister Yossi Beilin called Barghouti's arrest "one achievement too many," noting that while Barghouti is under arrest, "leaders of the Hamas and Islamic Jihad go free." He warned the arrest could "lead the conflict into even darker corners, and called on Israel to release Barghouti at its own initiative and quickly."

    MK Yosef Lapid of Shinui said that while he believes Barghouti should have been arrested and put on trial, he hopes that "Barghouti in prison won't mean more trouble for Israel than Barghouti free."

    MK Michael Kleiner of Herut called for Barghouti to be put on trial and served the death penalty. Coalition whip Ze'ev Boim of Likud called for "a public trial."

    MK Avshalom Vilan of Meretz said that the damage in capturing Barghouti will far outweigh the advantages, warning that the move will start a new cycle of violence. Hadash issued a statement calling on Israel to release Barghouti.