The Apple Core

Jason D. O'Grady & David Morgenstern

Mac users of iChat messaging could be burned by new AIM logging

By | January 8, 2012, 11:06pm PST

As pointed out recently by the Electronic Frontier Foundation (EFF), a new logging feature introduced into AOL Instant Messenger (AIM) raises many privacy concerns. However, Mac users may not be aware that iChat uses the AIM service.

Several sites pointed out implications for Mac users, including Macworld’s Business Center and Intego’s Mac Security Blog.

Dan Miller at Macworld said he had downloaded the preview version of AOL’s new AIM client software, which will handle AIM messages as well as Facebook and Twitter messages. He closed the application and went back to iChat, his usual messaging client. “That’s when the weird stuff started happening:…,” he wrote. Suddenly, his iChat chats sported a warning that links and such would be logged.

Now, remember, that conversation was happening in iChat, not the in new AIM client. Yet AOL was still injecting that message into chats happening via my AIM account. And it happened anytime I tried chatting with anyone, or they with me, via that account. Even after I deleted every vestige of the AIM client that I could find on my system, the messages persisted.

The Mac Security Blog warns that AIM will log chats up to two months, but who knows, it could be longer.

Another element of the new AIM is that the program scans all URLs in chats, in order to attempt to embed photos or videos in chat windows. Even if these links don’t lead to photos or videos, they are scanned and stored in logs. Yet this, too, cannot be turned off. The EFF says that, “it does not look like there will be a way to permanently opt out of the link downloading behavior.” It addition, “Since conversations can only be marked “off the record” from inside the new AIM, users of older versions or alternate clients will always be prone to having some of the links they send scraped, even though they won’t see them rendered.”

Alarming. Perhaps it’s time for Apple to switch to another service provider? Or get into the messaging business?

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

David Morgenstern has covered the Mac market and other technology segments for 20 years.

Disclosure

David Morgenstern

Freelance journalist/blogger David Morgenstern has nothing to disclose.

Biography

David Morgenstern

David Morgenstern has covered the Mac market and other technology segments for 20 years. In the recent past, he founded Ziff-Davis' Storage Supersite, served as news editor for Ziff Davis Internet and held several executive editorial positions at eWEEK. In the 1990s, David was editor of Ziff Davis' award-winning MacWEEK news publication as well as its successor title, eMediaWEEKly, which focused on multiplatform professional content creation. His byline can be found online and in print publications including CreativePro.com, Peachpit Press' Mac Bible and Popular Photography.

8
Comments

Join the conversation!

Just In

RE: Mac users of iChat messaging could be burned by new AIM logging
NZJester 11th Jan
@CobraA1 The thing about Trillian is it can also use the AIM network. If you use Trillian to contact someone over the AIM network your chat could be logged also the same way iChat can be logged!
Unless I'm going to participate in a revolution or engage in explicit sexual chats, should I be concerned? I ask that question in all sincerity. I really don't care if someone logs my rather boring chats with my friends and family. It's their life that they are wasting by monitoring those activities.

I'm reminded of my corporate experience that reinforced the concept that all, ALL online correspondance is recorded and that nothing transmitted over corporate email or AIM clients was private. This is almost the same thing.
Apple should merge iMessage with FaceTime to develop it's own iChat.
@Masari.Jones

iFace happy
I abandoned specific clients a long time ago, as people use too many things for IM. I'm rather happy just having unified chat via Trillian.
@CobraA1 The thing about Trillian is it can also use the AIM network. If you use Trillian to contact someone over the AIM network your chat could be logged also the same way iChat can be logged!
0 Votes
+ -
Another privacy issue...
davek9392 9th Jan
With all AIM programs including the new one, IM conversations are send over the network without any encryption. That means you should not use it for business. Many businesses these days record all employee internet activity. Your IM conversations would be in the enterprise IT logs.
davek said: > With all AIM programs including the new one, IM conversations are send over the network without any encryption.

That is exactly true, and this article is just more ZDNET anti-Apple FUD. Who exactly thought that chat were private? It can be intercepted any number of ways, just like email.
if you use your AIM account in iChat it is subjet to anything a regular AIM account would do. If you use Jabber, MSN, or an Apple ID, it should get the same warning (at least I haven't seen any such messages, and have not created an AIM account)

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix