10/25/2004 01:37:59 AM|||Joe|||I was in the process of installing AIM, and I noticed an exceptionally long legal agreement. Now that it includes WeatherBug, WildTangent and other crap, I might as well read it so I can defend my arguments to not use the actual AIM client, and use a more useful 3rd party one like Trillian.

Do I hate AIM? - No. It's overall the best Instant Message service
Do I dislike where AIM is going? Yes. It was a great service, with only a few non-harmful exploits usually pertaining to Screen Names. Now since there are additional components to AIM, there are more exploits and instability of the AIM service. So thats my opinion.

Did your bandwidth narrow down when using AIM? [Probably] Here's why:
LATENT DISTRIBUTION OF COMPONENTS
The software components necessary for the full functioning of the AIM Products are provided ..... these components are downloaded concurrently with AIM and other components are installed at a later time when the AIM software detects that you have available bandwidth. In the latter case, a small piece of software may be installed initially with AIM that can then "call out" over the Internet to a web server and complete installation of the component on your computer when it is convenient...
Wow, this made it in the legal agreement (haha)
YOUR RESPONSIBILITY
...You agree to keep confidential the passwords associated with your account. You may not use AIM while driving, operating hazardous equipment, or engaging in other forms of hazardous activities. You agree to indemnify and hold harmless AOL for losses incurred by AOL or another party due to someone else using your account or password as a result of your failure to use reasonable care to keep your account information confidential or as a result of your failure to use reasonable care while using AIM Products.

My response, what about password cracking. It doesnt address brute-force cracking or rate limiting during authentication phases, currently, very relaxed rate limits, especially when you can hit like 100+ servers many times per minite...

To try to attempt reduce IM Spam (SpIM), right....
NO SPAM, BULK EMAIL OR BULK INSTANT MESSAGES
You may not use AIM Products including communication tools such as e-mail, instant messaging and chat services to send unsolicited bulk communications, including through e-mail or instant messages. ... You may not harvest or collect information about AIM users from AIM Products, including Screen Names, and use that information for the purpose of sending unsolicited bulk communications. Any violation of these provisions may result in immediate termination of your account and further legal action. You agree that AOL may take any legal and technical remedies to prevent unsolicited bulk communications from entering, utilizing or remaining within AIM's networks.

My Response: Hm. Nice legal backup, but no substance. If the most [AOL] does is 'Warn" IM users for SpIMing the AIM/AOL network thats sad. What about, when multiple [AIM] network connections are detected at the presence of bulk IMing, you are banned from the AIM/AOL network for IM/Chat services. Warning is highly ineffective, as most SpIMers use 100+ spam bots [from one IP address] that just barely beat the IM rate limits, and are quite effective.
This one's good, especially recently, an issue where a pornographic site was linked from the AIM Today screen...

NO DUTY TO MONITOR
AOL is not required to pre-screen Content available on the AIM Products, including the content of any messaging that occurs on or through the AIM service, although AOL reserves the right to do so in its sole discretion. AOL is not liable for Content that is provided by others. AOL reserves the right to remove Content that, in its sole judgment, does not meet its standards or does not comply with these Terms of Service, but AOL is not responsible for any failure or delay in removing such material.

My Response: This is a nice thing, since MANY children use AIM, probably a good, 45% of users just guessing. Recently, there was an issue where pornographic material was linked from the AIM Today screen. After many hours, AOL eventually removed it and put a AOL for Broadband link in its place, LOL. But, they dont take responsibility for the content, mmmm riiiight....

Whenever AIM is shutdown to become a paid service, dont be surprised...
CHANGES TO THE SERVICE
AOL has the right at any time to change, modify, add to or discontinue or retire any aspect or feature of the AIM Products......AOL has no obligation to provide you with notice of any such changes.
What makes other AIM third party clients violate the TOS
...You may not translate, reverse-engineer or reverse-compile or decompile, disassemble, make derivative works from, or otherwise attempt to discover any source code in the Software...
My Response: I think with some google searching, the AIM OSCAR protocol is public [leaked], since it is essentially a part of source code, and derivative works since its the same protocol. Would packet logging violate the TOS, anyhow all IM's are unencrypted, over wireless in a public place, you can read conversations with ease. Also, AIM "Security Certificates" are proprietary of AIM, so the site that explains how to make your own security cert violates the TOS. All it does is encrypt transmissions, why can't AIM include that?! [It does, for a fee]

It pretty much finishes up with federal export restrictions, and the two legal agreements of WeatherBug and WildTangent.

Anyhow that was a true waste of time, but whatever.
|||109869196261579681|||The AIM TOS, opinions...