BIM
Details
| Size: | 0K |
| Last Update: | 2008-05-03 00:39:36 |
| Version: | 1.0 |
| OS Support: | Linux |
| License/Program Type: | GPL (GNU General Public License) |
| Publisher: | Brad Wellington |
| Price: | $0.00 |
Description:
BIM 1.0 is chat software developed by Brad Wellington.
BIM version 1.00 is a free Java based AOL instant messenger client. BIM is a Java based AOL Instant Messenger Client with encryption support. It has a small code base (617KB w/encryption libs) and can be easily run on wide array of operating systems. BIM has been tested on OSX, Windows XP, Solaris and Linux. BIM also incorporates encryption technology so that a user can communicate securely with any other BIM user.
I think pictures speak louder then words so I decided a demonstration was in order. Using another brilliant open source product, PlugProxy, I was able to take a quick screen shot of what goes over a TCP connection when connected to AIM. As you can see the connection is not secure at all, everything is sent as clear text. A user is vulnerable to both eavesdropping and message alteration.
In addition to your messages being compromised, you have no way of knowing for sure that your buddy's messages are genuine. They could have their connection altered much in the same way as your could be. A true security solution encompasses the following:
Private Messages - Messages sent are not read or altered by others
Authenticated Messages - Messages received can be verified that they were in fact sent by the sender
Verified Messages - Your buddy is who they say they are
BIM addresses all three of these issues. BIM can run a chat session in what is referred to as secure mode, although BIM's secure messaging involves more then just encryption. Unlike other IM clients, BIM actually addresses all three of these issues. Every unique user of BIM can generate a public/private key pair for security use. BIM's security hinges on the secrecy of this private key, BIM will never send this key over the network however it is up to the user to secure the key on their local machine.
Private Messages
BIM does use encryption in order to send messages safely to other users. BIM uses RSA encryption to ensure only the intended receiver can decrypt your message. It does this by encoding each message with the public key of the recipient. By doing so only the intended recipient (and the NSA perhaps :)) can properly and easily decrypt each message.
Authenticated Messages
BIM uses digital signatures for the verification of messages. To be more specific BIM creates an MD5 hash of each message, which is then encoded using RSA again as specified by PKCS1. This signature for each messages is appended to the message and serves two purposes. It allows the recipient to verify it was in fact the send of the message who reated this message, more specifically it proves the message was not sent by an imposter. In addition the signature verifies the content of the message, namely that the message was not altered in transit by a third party.
Verified Messages
All transactions in BIM (and most PKI schemas in general) begin with two parties swapping public keys. In order to prevent the famous man in the middle attack, public keys are signed by a certificate authority. Users can then verify the identity of the user sending them the public key. BIM does address this and comes with a bot (CAbot) which runs on the AOL network and can give out certificates. CA-bot in its current state is not that useful though for the following reasons:
The CA-bot will give a certificate to anyone who wants one with a valid AIM id.
The CA-bot has no way of revoking a certificate.
although it is provided in the bim distro for educational purposes. This bot might be upgraded in a future version of BIM. To run the bot do this:
java -cp bim.jar wellington_brad.bim.cabot.CaBot
You should see aol id cabot215 come online.
When BIM is running in secure mode, it becomes very difficult for a potential attacker to do anything but prevent communication. Here is picture of the same AOL conversation using PlugProxy as was shown above, this time in secure mode. Here is a link to a presentation I did on some of these issues.
Requirements:
BIM's sole requirement is that you have JDK 1.3 or above on your machine. You can download the latest version of Java from Sun's website.
BIM 1.0 supports different languages (including english). It works with Linux.
Downloading BIM 1.0 will take if you use fast ADSL connection.
0 comments
Downloadtube.com agrees that pirated software hurts software
developers and does not support such practices. We acknowledge and
agree that software piracy is theft. Using BIM crack,
BIM key generator, BIM keygen, as well as any
pirated BIM serial number/serial numbers and BIM
registration code/codes, warez, keys, torrents, passwords, is illegal
and does not support the future development of BIM.
Downloadtube.com advises that BIM should be only used in
accordance with the rules of intellectual property and the existing
Criminal Code. Downloadtube.com does not allow the inclusion of any
crack, serial or keygen and disclaims any liability for the
inappropriate use of BIM.
Add to
BIM Version History
| Product |
Date Added |
| BIM 1.0 |
2008-05-03 00:39:36 |
Related Software
|
|
From category: Email |
| OmniBiff is a universal "biff" program able to monitor multiple email servers of virtually any type.... |
|
|
From category: Chat |
| wxMtpChat is a multi-platform MtpChat client written in C++ and based on wxWidgets framework.... |
|
|
From category: Chat |
| EveryChat 3.61 is chat software developed by Matt Hahnfeld. EveryChat is a very simple chat script designed to work on ANY server with Perl correctly installed. It allows a multi-user chat to t... |
|
|
From category: Email |
| Cgmail is a fresh and shiny gmail checker and notifier that integrate well into gnome desktop.... |
|
|
From category: Chat |
| EKG2 20050418 is chat software developed by EKG Team. EKG2 project is an IM client for Unix systems (Linux, BSD, SunOS, Solaris, Mac OS X, and BeOS). It supports plugins, which makes i... |
|
|
From category: Chat |
| Atheism 2.0.6 is chat software developed by L3ECH. Atheism is an extremely flexible and configurable multi purpose Perl script for X-Chat. Here are some key features of \"Atheism\": Adva... |
|
|
From category: Chat |
| Echomine Muse 0.81 is chat software developed by Chris Chen. Echomine Muse is aJava API that provides quick and easy access to network collaboration services. Specifically, it allows you to... |
|
|
From category: Chat |
| Chirpy! 0.2 is chat software developed by Tim De Pauw. Chirpy! is an Open Source online quote management system. Chirpy! allows you to keep a database of quotes by friends and foes. It is most usef... |
|
|
From category: Chat |
| Pidgin, previously known as Gaim, is a multi-protocol instant messaging client for Linux, BSD, MacOS X, and Windows.... |
|
|
From category: Filesharing |
| bwFXPbot 0.1 is filesharing software developed by Bloodware. bwFXPbot is a Perl based IRC bot, designed for a spesific purpose to provide a solution for FTP based file sharing networks. The... |
|
|
From category: Email |
| Email-reminder allows users to define events that they want to be reminded of by email.... |
|
|
From category: Filesharing |
| fileq 0.5 is filesharing software developed by Paul Kremer. fileq transfers files from an incoming queue (directory) to a list of destinations. Destinations can only be directories on remote hosts.... |
|
|
From category: Telephony |
| YATE is a telephony engine aimed at creating an telephony server.... |
|
|
From category: Chat |
| aMSN 0.96 is chat software developed by Amsn Development Team. aMSN : Alvaro\'s Messenger, or Another MSN messenger clone This project is a modified and multilanguage version of Compu\'s Mes... |
|
|
From category: Chat |
| Mitter is a maemo/GTK+ client for Twitter.... |
Leave a comment