Instant messaging & messengers

This article is missing citations or needs footnotes. Please help add inline citations to guard against copyright violations and factual inaccuracies. (November 2007)

Pidgin 2.0 running under GNOME

Instant messaging (IM) is a form of real-time direct text-based communication between two or more people using shared clients. The text is conveyed via devices connected over a network such as the Internet.

Definition

IM falls under the umbrella of chat, as it is a real-time text-based networked communication system, but is distinct in that it is based on clients that facilitate connections between specified known users (often using "Buddy List", "Friend List" or "Contact List"), whereas Chat includes web-based applications that allow communication between (often anonymous) users in a multi-user environment.^{[citation needed]} (an analogy would be comparing a telephone and a bar-room. With the telephone, you have to know the contact information to reach the other person, whereas you just show up at the bar and see who is there to chat with)

Overview

Instant messaging (IM) is a collection of technologies that create the possibility of real-time text-based communication between two or more participants over the internet or some form of internal network/intranet. It is important to understand that what separates chat and instant messaging from technologies such as e-mail is the perceived synchronicity of the communication by the user - Chat happens in real-time. Some systems allow the sending of messages to people not currently logged on (offline messages), thus removing some of the differences between Instant Messaging and e-mail (often this is done by sending the message to the associated e-mail account).

IM allows effective and efficient communication, allowing immediate receipt of acknowledgment or reply. In many cases Instant Messaging includes additional features, which make it even more popular. For example, users can see each other by using web-cams, or talk directly for free over the Internet using a microphone and headphones (or speakers). Many clients allow file transfer as well, although they are typically limited in the file-size allowed.

It is typically possible to save a conversation for later reference. Instant messages are often logged in a local message history, making it similar to the persistent nature of e-mails.

History

In early instant messaging programs each character appeared when it was typed. The UNIX "talk" command shown in this screenshot was popular in the 1980s and early 1990s.

Instant messaging predates the Internet, first appearing on multi-user operating systems like CTSS and Multics^[1] in the mid-1960s. Initially, some of these systems were used as notification systems for services like printing, but quickly were used to facilitate communication with other users logged in to the same machine.^{[citation needed]} As networks developed, the protocols spread with the networks. Some of these used a peer-to-peer protocol (eg talk, ntalk and ytalk), while others required peers to connect to a server (see talker and IRC). During the Bulletin board system (BBS) phenomenon that peaked during the 1980s, some systems incorporated chat features which were similar to instant messaging; Freelancin' Roundtable was one prime example.

In the last half of the 1980s and into the early 1990s, the Quantum Link online service for Commodore 64 computers offered user-to-user messages between currently connected customers which they called "On-Line Messages" (or OLM for short). (Quantum Link's better-known later incarnation, America Online, offers an instant messaging service under the name "AOL Instant Messenger" (AIM)). While the Quantum Link service ran on a Commodore 64, using only the Commodore's PETSCII text-graphics, the screen was visually divided up into sections and OLMs would appear as a yellow bar saying "Message From:" and the name of the sender along with the message across the top of whatever the user was already doing, and presented a list of options for responding.^[2] As such, it could be considered a sort of GUI, albeit much more primitive than the later Unix, Windows and Macintosh based GUI IM programs. OLMs were what Q-Link called "Plus Services" meaning they charged an extra per-minute fee on top of the monthly Q-Link access costs.

Modern, Internet-wide, GUI-based messaging clients, as they are known today, began to take off in the mid 1990s with PowWow, ICQ, and AOL Instant Messenger. Similar functionality was offered by CU-SeeMe in 1992; though primarily an audio/video chat link, users could also type messages to each other. AOL later acquired Mirabilis, the creators of ICQ; a few years later ICQ (now owned by AOL) was awarded two patents for instant messaging by the U.S. patent office. Meanwhile, other companies developed their own applications (Excite, MSN, Ubique, and Yahoo), each with its own proprietary protocol and client; users therefore had to run multiple client applications if they wished to use more than one of these networks. In 1998 IBM released IBM Lotus Sametime, a product based on technology acquired when IBM bought Haifa-based Ubique and Lexington-based Databeam.

In 2000, an open source application and open standards-based protocol called Jabber was launched. The protocol was standardized under the name "Extensible Messaging and Presence Protocol" (XMPP). XMPP servers could act as gateways to other IM protocols, reducing the need to run multiple clients. Multi-protocol clients can use any of the popular IM protocols by using additional local libraries for each protocol. IBM Lotus Sametime's November 2007 release added IBM Lotus Sametime Gateway support for XMPP.

Social networking providers (such as Facebook) often offer IM capabilities.

Many instant messaging services offer video conferencing features, Voice Over IP (VoIP) and web conferencing services. Web conferencing services integrate both video conferencing and instant messaging capabilities. Some instant messaging companies are offering desktop sharing, IP radio, and IPTV to the voice and video features.

The term "instant messenger" is a service mark of Time Warner^[3] and may not be used in software not affiliated with AOL in the United States. For this reason, the instant messaging client formerly known as Gaim or gaim announced in April 2007 that they would be renamed "Pidgin"^[4].

Clients

Each modern IM service generally provides its own client, either a separately installed piece of software, or a browser-based client. These typically only work with that company's service, although some (such as Google Talk) allow limited function with other services. There are also 3rd-party client software applications that will connect with most of the major IM services. Pidgin, Trillian, Meebo, Adium, and Digsby are a few of the common ones.

Interoperability

Pidgin's tabbed chat window in Ubuntu

Standard free instant messaging applications offer functions like file transfer, contact lists, the ability to have simultaneous conversations etc. These may be all the functions that a small business needs but larger organizations will require more sophisticated applications that can work together. The solution to finding applications capable of this is to use enterprise versions of instant messaging applications. These include titles like XMPP, Lotus Sametime, Microsoft Office Communicator, etc., which are often integrated with other enterprise applications such as workflow systems. These enterprise applications, or Enterprise Application Integration (EAI), are built to certain constraints, namely storing data in a common format.

There have been several attempts to create a unified standard for instant messaging: IETF's SIP (Session Initiation Protocol) and SIMPLE (SIP for Instant Messaging and Presence Leveraging Extensions), APEX (Application Exchange), Prim (Presence and Instant Messaging Protocol), the open XML-based XMPP (Extensible Messaging and Presence Protocol), and OMA's (Open Mobile Alliance) IMPS (Instant Messaging and Presence Service) created specifically for mobile devices.

Most attempts at creating a unified standard for the major IM providers (AOL, Yahoo! and Microsoft) have failed, and each continues to use its own proprietary protocol.

However, while discussions at IETF were stalled, Reuters signed the first inter-service provider connectivity agreement on September 2003. This agreement enabled AIM, ICQ and MSN Messenger users to talk with Reuters Messaging counterparts and vice-versa. Following this, Microsoft, Yahoo! and AOL came to a deal where Microsoft's Live Communication Server 2005 users would also have the possibility to talk to public instant messaging users. This deal established SIP/SIMPLE as a standard for protocol interoperability and established a connectivity fee for accessing public instant messaging clouds. Separately, on October 13, 2005 Microsoft and Yahoo! announced that by the 3rd quarter of 2006 they would interoperate using SIP/SIMPLE which was followed on December 2005 by the AOL and Google strategic partnership deal where Google Talk users would be able to talk with AIM and ICQ users provided they have an AIM account.

There are two ways to combine the many disparate protocols:

1. One way is to combine the many disparate protocols inside the IM client application.
2. The other way is to combine the many disparate protocols inside the IM server application. This approach moves the task of communicating to the other services to the server. Clients need not know or care about other IM protocols. For example, LCS 2005 Public IM Connectivity. This approach is popular in XMPP servers however the so-called transport projects suffer the same reverse engineering difficulties as any other project involved with closed protocols or formats.

Some approaches allow organizations to create their own private instant messaging network by enabling them to limit access to the server (often with the IM network entirely behind their firewall) and administer user permissions. Other corporate messaging systems allow registered users to also connect from outside the corporation LAN, by using a secure firewall-friendly HTTPS based protocol. Typically, a dedicated corporate IM server has several advantages such as pre-populated contact lists, integrated authentication, and better security and privacy.

Some networks have made changes to prevent them from being utilized by such multi-network IM clients. For example, Trillian had to release several revisions and patches to allow its users to access the MSN, AOL, and Yahoo! networks, after changes were made to these networks. The major IM providers typically cite the need for formal agreements as well as security concerns as reasons for making these changes.

Mobile instant messaging

Mobile Instant Messaging (MIM) is the technology that allows Instant Messaging services to be accessed from a mobile/cellular device, ranging from a standard cell phone to an iPhone, to a Blackberry, to an Android-based device. It is done two ways:

• Embedded Clients - tailored IM client for every specific device.
• Clientless Platform – a browser based application that does not require downloading any software to the handset, which enables all users, all devices, from any network to connect to their Internet IM service (theoretically. There are sometimes issues with browser capabilities that can limit this).

Friend-to-friend networks

Instant Messaging may be done in a Friend-to-friend network, in which each node connects to the friends on the friends list. This allows for communication with friends of friends and for the building of chatrooms for instant messages with all friends on that network.

IM language

Users sometimes make use of internet slang or text speak to abbreviate common words or expressions in order to quicken conversations or to reduce keystrokes. The language has become universal, with well-known expressions such as 'lol' translated over to face to face language.

Emotions are often expressed in shorthand, such as the abbreviation LOL, BRB and TTYL (respectively Laugh(ing) Out Loud, Be Right Back and Talk To You Later).

Some, however, attempt to be more accurate with emotional expression over IM. Real time reactions such as (chortle) (snort) (guffaw) or (eye-roll) are becoming more popular.^[5] Also there are certain standards that are being introduced into mainstream conversations including, '#' indicates the use of sarcasm in a statement (alternatively (!) after the statement) and '*' which indicates a spelling mistake and/or grammatical error in the previous message, followed by a correction.^{[citation needed]}

Business application

Instant messaging has proven to be similar to personal computers, e-mail, and the World Wide Web, in that its adoption for use as a business communications medium was driven primarily by individual employees using consumer software at work, rather than by formal mandate or provisioning by corporate information technology departments. Tens of millions of the consumer IM accounts in use are being used for business purposes by employees of companies and other organizations.

In response to the demand for business-grade IM and the need to ensure security and legal compliance, a new type of instant messaging, called "Enterprise Instant Messaging" ("EIM") was created when Lotus Software launched IBM Lotus Sametime in 1998. Microsoft followed suit shortly thereafter with Microsoft Exchange Instant Messaging, later created a new platform called Microsoft Office Live Communications Server, and released Office Communications Server 2007 in October 2007. Oracle Corporation has also jumped into the market recently with its Oracle Beehive unified collaboration software^[6]. Both IBM Lotus and Microsoft have introduced federation between their EIM systems and some of the public IM networks so that employees may use a single interface to both their internal EIM system and their contacts on AOL, MSN, and Yahoo!. Current leading EIM platforms include IBM Lotus Sametime, Microsoft Office Communications Server, and Jabber XCP. In addition, industry-focused EIM platforms as Reuters Messaging and Bloomberg Messaging provide enhanced IM capabilities to financial services companies.

The adoption of IM across corporate networks outside of the control of IT organizations creates risks and liabilities for companies who do not effectively manage and support IM use. Companies implement specialized IM archiving and security products and services to mitigate these risks and provide safe, secure, productive instant messaging capabilities to their employees.

Review of products

This section does not cite any references or sources. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. (July 2008)

IM products can typically be categorised into two types: Enterprise Instant Messaging (EIM) and Consumer Instant Messaging (CIM). Enterprise solutions use an internal IM server, however this isn't always feasible, particularly for smaller businesses with limited budgets. The second option, using a CIM provides the advantage of being inexpensive to implement and has little need for investing in new hardware or server software.

For corporate use encryption and conversation archiving are usually regarded as important features due to security concerns. Sometimes the use of different operating systems in organizations calls for the use of software that supports more than one platform. For example many software companies use Windows XP in administration departments but have software developers who use Linux.

Risks and liabilities

Although instant messaging delivers many benefits, it also carries with it certain risks and liabilities, particularly when used in workplaces. Among these risks and liabilities are:

• Security risks (e.g. IM used to infect computers with spyware, viruses, trojans, worms)
• Compliance risks
• Inappropriate use
• Intellectual property leakage

Security risks

Crackers (malicious "hacker" or black hat hacker) have consistently used IM networks as vectors for delivering phishing attempts, "poison URLs", and virus-laden file attachments from 2004 to the present, with over 1100 discrete attacks listed by the IM Security Center^[7] in 2004-2007. Hackers use two methods of delivering malicious code through IM: delivery of virus, trojan, or spyware within an infected file, and the use of "socially engineered" text with a web address that entices the recipient to click on a URL that connects him or her to a website that then downloads malicious code. Viruses, worms, and trojans typically propagate by sending themselves rapidly through the infected user's buddy list. An effective attack using a poison URL may reach tens of thousands of people in minutes when each person's buddy list receives messages appearing to be from a trusted friend. The recipients click on the web address, and the entire cycle starts again. Infections may range from nuisance to criminal, and are becoming more sophisticated each year.

IM connections usually take place in plain text, making them susceptible to eavesdropping. In addition, IM client software often requires the user to expose open UDP ports to the world, increasing the threat posed by potential security vulnerabilities.^[8]

Compliance risks

In addition to the malicious code threat, the use of instant messaging at work also creates a risk of non-compliance to laws and regulations governing the use of electronic communications in businesses. In the United States alone there are over 10,000 laws and regulations related to electronic messaging and records retention.^[9] The better-known of these include the Sarbanes-Oxley Act, HIPAA, and SEC 17a-3. Clarification from the Financial Industry Regulatory Authority ("FINRA") was issued to member firms in the financial services industry in December, 2007, noting that "electronic communications", "email", and "electronic correspondence" may be used interchangeably and can include such forms of electronic messaging as instant messaging and text messaging.^[10] Changes to Federal Rules of Civil Procedure, effective December 1, 2006, created a new category for electronic records which may be requested during discovery in legal proceedings. Most countries around the world also regulate the use of electronic messaging and electronic records retention in similar fashion to the United States. The most common regulations related to IM at work involve the need to produce archived business communications to satisfy government or judicial requests under law. Many instant messaging communications fall into the category of business communications that must be archived and retrievable.

Inappropriate use

Organizations of all types must protect themselves from the liability of their employees' inappropriate use of IM. The informal, immediate, and ostensibly anonymous nature of instant messaging makes it a candidate for abuse in the workplace. The topic of inappropriate IM use became front page news in October 2006 when Congressman Mark Foley resigned his seat after admitting sending offensive instant messages of a sexual nature to underage former House pages from his Congressional office PC. The Mark Foley Scandal led to media coverage and mainstream newspaper articles warning of the risks of inappropriate IM use in workplaces. In most countries, corporations have a legal responsibility to ensure harassment-free work environment for employees. The use of corporate-owned computers, networks, and software to harass an individual or spread inappropriate jokes or language creates a liability for not only the offender but also the employer. A survey by IM archiving and security provider Akonix Systems, Inc. in March 2007 showed that 31% of respondents had been harassed over IM at work.^[11] Companies now include instant messaging as an integral component of their policies on appropriate use of the World Wide Web, e-mail, and other corporate assets.

Security and archiving

In the early 2000s, a new class of IT security provider emerged to provide remedies for the risks and liabilities faced by corporations who chose to use IM for business communications. The IM security providers created new products to be installed in corporate networks for the purpose of archiving, content-scanning, and security-scanning IM traffic moving in and out of the corporation. Similar to the e-mail filtering vendors, the IM security providers focus on the risks and liabilities described above.

With rapid adoption of IM in the workplace, demand for IM security products began to grow in the mid-2000s. By 2007, the preferred platform for the purchase of security software had become the "computer appliance", according to IDC, who estimate that by 2008, 80% of network security products will be delivered via an appliance.^[12]

User base

Note that many of the numbers listed in this section are not directly comparable, and some are speculative. Some instant messaging systems are distributed among many different instances and thus difficult to measure in total (e.g. XMPP). While some numbers are given by the owners of a complete instant messaging system, others are provided by commercial vendors of a part of a distributed system. Some companies may be motivated to inflate their numbers in order to increase advertisement earnings or to attract partners, clients, or customers. Importantly, some numbers are reported as the number of "active" users (without a shared standard of that activity), others indicate total user accounts, while others indicate only the users logged in during an instance of peak usage.

See also

• Operator messaging
• Microblogging
• Chat room
• Comparison of instant messaging clients
• Comparison of instant messaging protocols
• Instant messaging manager
• LAN messenger
• Text messaging
• Unified communications
• Usage share of instant messaging clients

References

External links

• Instant messaging at the Open Directory Project
• "Global Instant Messaging Market Share" - CC-Licensed market share data.