What are secutiry risks of Yahoo IM

[mhaff]

We are on a novell network and use a Netopia SDSL router for
our DSL connection. The router has a built in firewall. However, I'm concerned about Yahoo instant messenger. I've seen some information that leads me to believe that Yahoo IM makes it simple for someone on the outside to get on the inside of our network and do what they want. We have up to date virus protection but I'm more concerned about the hacking aspect of security.

Comments?

 

[chiph]

If your users want IM service, it's best if you have your own internal IM server. Otherwise you run into eavesdropping problems (company business info being sent in the clear over the Internet via servers outside your control), virus problems (people sending files via IM that might get past your virus scanner), and productivity issues.

Chip H.

 

[SgtB]

Messengers are one of the biggest security holes on the planet! (ok maybe not that bad, but its BAD!) It creates a p2p tunnel right through your firewall, and can allows access to exteranl users right through your firewall. Its also a great means to transmit viruses, and other undesireable software.
Get rid of it at all costs. ________________________________________
Check out

http://www.security-forums.com

 

[bp1169]

Does anyone have any experience with good internal IM server software?

 

[danielhozac]

How about setting up an internal IRC server? It's not that hard, and the traffic can be encrypted. //Daniel

 

[smah]

Here's the best list that I've seen. I haven't tried any of them though.

http://techupdate.zdnet.com/techupdate/stories/main/0,14179,2901866,00.html

 

[mhaff]

I appreciate all of the input. As far as enterprise IM and IRC goes we're not going to do that. Since I first posted the question, we've instituted a ban on IM services unless someone can give good reason to have it. No one has. I believe only (2) people were actually using it, and that was for personal use on their time. Everyone here has been understanding about it since we have good evidence that someone hacked into our DSL router last week and changed the settings. See the thread I posted in another forum explaining that at the link below.

thread585-463286