Mobile

Last year, I declared that video would be big in the Internet space and this year, I believe that mobile will be a major focus.

The devices

While mobile devices will continue to grow on the existing curve, adding more processing power and more memory, they will also add a number of features with are significantly different from the ones we’ve been accustomed to see on a mobile phone. Cameras will increasingly become just a tick on the feature list and location-aware devices will become more prevalent (they will sport a GPS chip).

The new features will come in 3 key areas: first, more mobile devices will be able to multi-task, allowing users to use functions on their phone while making a call at the same time. The multi-tasking will extend to wireless services too and people will be able to surf the web or use internet-based application at the same time as they are making a phone call. A key hardware change in those mobile devices will be an increase in the number of phones (and other mobile device) that not only have a GSM or CDMA chip but also sport a WiFi receiver. This will allow the devices to run across a variety of networks. I suspect (and am probably going out on a limb here as my guess is that this would be early) that some of the devices will conform to the 802.11n WiFi standard, and will use that technology as a bridge to 3G because 3G deployment in the United States will be slow.

The second big hardware innovation in mobile devices will be the presence of RFID readers and chips that will allow users to use them for person-to-person or person-to-business commerce, turning mobile devices into electronic wallets. Deployments in Near Field Communications for credit cards have already started to happen on a trial basis in cities like New York.

The third big hardware innovation in mobile devices, in my mind, will come from the fact that some devices will be DNLA certified, allowing them to exchange, photos, music and videos with other devices in your house.

The services

This year, the rise of mobile services will be powered by a sharp drop in the price of data service offerings from mobile operators, with some operators offering flat-rate all-you-can-ear services to their customers.

In the content arena, the most popular type of service will be near-CD-quality audio downloads. There may be some offerings in the streaming audio market but I suspect that those will be very limited. The second most popular content service, in the mobile space, will be mobile video, with TV and user-created content (mobile YouTube and competitors) filling that gap. Those services will be advertising supported, with revenue sharing agreement between the mobile operators and the content providers.

Map services will also enjoy some level of success. The recent introduction of Google Maps on the Treo platform can be seen as an example of that trend and location-aware device will offer richer experiences in that space, with live traffic info, weather, and maybe some advertising being part of the offerings.

However, content will not take the forefront on mobile services, which will still be dominated by communication as the primary type of application. In that space, though, regular phone service will not be the predominant form of communication. SMS and MMS will be integrated with instant messaging platforms and email, to provide a complete communication package. Expect features like the ability to send text messages to multiple parties at once to start appearing, allowing for chat-like interfaces on phones.

As a result of those changes, social networks will also start integrating mobile applications more closely this year. MySpace and other networks like it will offer integrated solutions for mobile blogging, podcasting, and vlogging, as well as integrated chat and location aware social networking services. Dating services will be another arena to go mobile with the ability to identify matches within your general area.

Wrapping up the offerings will also be limited trials in the videophone space, leveraging off new next generation 3G infrastructures. The videophone trials (and 3G in general) will still be limited offerings by the end of the year, due to the high premium charged for such services.

On the voice end, the introduction of WiFi on some mobile devices will give rise to VoIP mobile applications. If the devices sport 802.11n receivers and such infrastructure is deployed, services around that space could eclipse traditional voice traffic.

Apple

Due to the added power mobile phones now have, the iPod is threatened. Apple makes a defensive move by unveiling the Apple ecosystem, centered around use of media in general and of the Apple iTunes store in particular. With the introduction of its own offering in the mobile space (an iPod with phone functionality and not a phone with iPod functionality) and in the living room (the already pre-announced iTV components), Apple presents a strategy that allows for simple integration of all their components into a digital lifestyle offering.

In the non-media space, Apple bundles blogs and wikis with the new version of OSX and starts offering Web 2.0-like functionality on its Xserve servers, in a bid to get a spot in enterprise racks. They will also merge in social networking features in their calendaring and address book applications, allowing for a more integrated experience.

In another bid for enterprise positioning, Apple will include virtualization of other Operating Systems natively in the next version of OSX, allowing their computers to run Windows and OSX applications side by side under OSX. The feature will take some of the existing Apple bootcamp attributes and turns them into an equivalent of Parallels.

In a surprise move, Apple will also announce that it has signed a partnership with Google, which will offer the Google Apps for your domain as a replacement for the .mac service offered by Apple. The service will now be available either as a free ad-supported service, or on the same premium service offering as before without ads.

On the hardware end, Apple will endorse 802.11n as their standard for media distribution, equipping all new computers and the iTV device with receiver cards so it can leverage off the higher speeds offered by that standard. Because of its long-standing relationship with Sony, the company will also decide to side with BlueRay as their standard for next-generation disks, equipping their new laptops with drives following that standard.

Microsoft

Microsoft’s oft-delayed Windows Vista will finally be released but adoption of the new operating system will be lackluster as few of today’s computers can support it. The same will be true of the release of Microsoft Office 2007, as most users feel perfectly OK with the version of those products they have running on their desktops.

With the major release of updates to the Windows and Office platforms behind it, the company will focus efforts in other areas. In the console market, Xbox 360 will become the dominant game platform, due to slow adoption of the PS3 platform. Microsoft will innovate heavily on that platform, leveraging its positioning in the living room to offer more movies, more TV shows and other types of services around it. Meanwhile, the company will also work on a major revision of their Zune offering, offering a new version of the iPod competitors that will be better received than its predecessor. However, Zune 2.0 will not make a major dent into the iPod market. On the web end, Microsoft will consider the acquisition of either Yahoo! or AOL as a way to shore up its MSN offering and adopt a more aggressive stance in its fight for online advertising revenue.

Virtual Currencies

There will be more talk about the digitization of money this year. Microsoft will use its Microsoft points as a new form of currency that can be used not only on the Zune marketplace and the Xbox live marketplace but also as a way to pay for goods and services online with approved merchants. This will be followed by support for a payment solution (like Google Payment or Paypal) in a stake to get a stronger foothold in that space.

Google will continue pushing its Google Payment engine, moving it to an international base before year end. Meanwhile Paypal will continue expanding its lead in the space and will start offering virtual credit card numbers that will be usable on any system and tie back to Paypal on the back-end.

But the big stories in the virtual currency space will be around the rise of virtual worlds like SecondLife and others, which will see their own virtual currencies rise against the dollar. Their will be discussion about the power those virtual worlds operators have over money flows and calls for regulations of those currencies (and possible taxation of revenue made in those virtual worlds) in several countries around the world.

Virtual Worlds

Speaking of virtual worlds, there will be a continuing explosion in the growth of this phenomenon. By year end, SecondLife alone will have over 15 millions residents, but will be experience growth pains. At least one other major virtual world operators will appear in the space but most corporations will rush to SecondLife.

The initial hype that started appearing in the mainstream press about SecondLife will give way to a number of negative stories, probably talking about some of the darker aspects of the virtual world phenomenons, including gold farming, the sex trade, and gambling. Some politician will use the negative press as a way to grab headline by calling for a government inquiry in the dealings of virtual worlds operators.

While I declared 2007 the year of mobile, virtual worlds will come of close second in terms of highlights for the year. I suspect that LindenLab will surprise people by announcing that it will open up its platform and present the underlying components as a new standard for the web. The company will then start offering their grid software as a standalone application that corporations can install on their own servers if they want more control. LindenLab will also allow companies to use customized version of their thick client that could be branded with company destinations and other goodies.

Due to LindenLab’s strength in the space, many companies will consider acquiring it but many will be turned off by all the negative press and potential for government involvement.

Media

Mainstream media will continue trying to co-opt successful bloggers and will also turn its attention to successful podcasters and vloggers. New stars will emerge online, develop followings there and make the jump to mainstream media, while the reverse path will be taken by mainstream reporters and actors, who will increasingly start vlogging and podcasting (they’re already blogging).

Pressured by lower viewership in their traditional timeslots, TV stations will start posting more content online, with at least one TV station offering all its primetime slate online in and advertising supported fashion. Smaller video distributors, in the meantime, will start investigating using bittorrent for distribution of their content. Some old TV show will see its archive fully posted online and will start receiving a new stream of revenue as a result of that online appearance.

Meanwhile, ad revenue will continue to shift to web, and media will reluctantly follow. By year end, most newspapers will have combined their print and online newsrooms, and many will be cutting back on print to focus more on their online presence. As part of this shift to online, we will also see increased reliance on user generated content, with some newspapers offering blogs to their readers and encouraging active participation in making the news.

However, most of those efforts will not generate the expected returns as Google gobbles up increasing share of overall internet ad revenue, and starts expanding to audio and video. Discussion in the traditional media will start shifting to whether Google is too powerful for everyone’s good.

Death of the website/webpage

Another important shift in the media space will be the death of the concept of traditional website or web page as a result of increasing consumption of content via RSS or through distribution of widgets that can be embedded in other people’s sites. People will move away from the term web site and start talking about web properties. Because content will not necessarily be consumed in the creator’s site, there will be discussions of a new for new advertising/revenue models for such content and a need for new metrics to identify reach and audience. This will present a new opportunity for companies in the web analytics space.

As the web page is no longer seen as the best way to measure the success of a web property, the CPM will be on its last gasp as a model for selling online advertising, replaced largely by cost per click (CPC) and increasingly by cost per action (CPA) as the way to sell ads online.

Web 2.0

There will be increasing verticalisation in the web 2.0 space, with social networks, search, and web service offerings becoming more focused this year. However, this will also mean that many companies that were only single features will not be able to adapt and will die. Others will continue to be acquired for sums in the under $100 million category and few, if any, will go public.

Tagging will become more and more implicit, with less and less users actually doing the tagging and more and more tags being generated algorithmically. More applications will start looking at people’s behavior and creating the appropriate tags or making the appropriate modifications in the background.

But it’s not all doom and gloom for web 2.0 as Enterprise 2.0 becomes a reality. Use of blogs, wikis and VoIP behind the firewall commonplace at most large corporations and other technologies introduced as part of web 2.0 (AJAX, podcasting, etc…) will become more common in Global 100 corporations.

And speaking of the enterprise space, enterprise search will be huge, with Fast and/or Autonomy being acquired by Oracle, HP, or Microsoft. More focused will be paid on creating strong search solutions for the unstructured data on intranets and IBM will be a major player in the space.

Conclusion

At year end, many of those predictions will be wrong but a few will be correct. In the meantime, I’ll try to keep everyone up to date and hopefully will keep providing great content throughout the rest of the year.

I think 2007 will be another banner year and believe that we are looking at another existing set of new developments. Feel free to comment below and tell me what you think I may have missed (or point me to other prognostications, as I haven’t had time to get to my aggregator since Christmas).

Tristan Louis is the founder and CEO of Keepskor and writes the influential tnl.net weblog, where this was initially posted under the title 2007 Predictions. You can follow him on twitter here or receive his weekly newsletter by subscribing here.

Voice Over IP

VoIP experienced tremendous growth in 2004 but it was just the beginning. This year, much more will happen in that space.

Cable providers will start deploying VoIP services on their networks and phone companies will start bundling VoIP services with their DSL offering as a way to compete. By year end, all major broadband providers, whether they are offering services over cable or DSL lines, will have a VoIP service bundled with their access service.

Unable to compete with the larger telcos, some smaller players in the market will merge on order to lower their cost per subscriber by bringing their infrastructures together. Also, independent VoIP companies will sign peering agreement with each other in order to bypass traditional telcos and lower the cost of connectivity from one independent VoIP company to another.

Further pressure will be put on all players on the American market as overseas companies will start targeting U.S. customers. Before year-end, at least one company will offer an unlimited calling to several countries plan. Other plans will provide unlimited calling to each continent. This will start putting pressure on established government monopolies in several countries, especially in Europe.

VoIP will also experience strong growth within the enterprise, with companies looking to open-source solutions like Asterisk to replace their PBX infrastructure with a lower cost alternative.

As all this happens, equipment will not only become cheaper but will also become much easier to use and install. Along with it, new sets will come out, with cordless VoIP offerings becoming much more common. Competition in this space will be on features available in new handsets.

With substantial portions of the phone network switching to VoIP, video telephony will start taking hold. However, the price of equipment will still be too high for those services to experience the kind of growth other sectors in the VoIP market will experience.

Entertainment Convergence

The convergence of the computer and other entertainment forms (television, radio, gaming, mobile phones) will continue, further blurring the lines in the convergence world.

With broadband now being the major way to access the Internet in the United States, Internet usage for new forms of entertainment will grow. Along with it, however, will be a continuing challenge to the established media order.

The challenges faced by the music industry with the introduction of Napster will now be the new reality for the movie and television industry. Five years ago, I started seeing the phenomenon emerge and believe the four step process of the digital asset dance will be full blown for the MPAA this year. The MPAA will spend part of the year suing companies and users for downloading movies. However, they are also better prepared that the music industry in that they are already offering legal download services like MovieLink.

While litigation will be one of the ways convergence appears on the front page, many providers will find a way to mine this new world for new dollars. Expect some companies to start offering legal download of television programs for a fee. As the Internet becomes the standard telecommunication infrastructure, content will start getting carried more heavily. Phone companies will start using this to offer bundle TV services with their DSL offering as a way to compete with the cable TV companies that have invaded the telecom turf. Before year end, at least one traditional telco will offer TV over IP. All that content will be protected by DRM systems, getting people more and more used to having less and less rights over the content they receive.

Meanwhile, on the wireless end, the introduction of more powerful mobile phones and the introduction of faster mobile phone networks will also play out in the favor of content producers. As voice traffic revenues continue to decrease, expect mobile phone companies to push data services such as downloadable movies and downloadable music more heavily. By year, MP3 will be the standard format for cellphones and Apple will offer a mobile phone version of the iTunes music store, allowing users to download music from the store and customize their phone with the latest hits.

On the non-Internet end of things, video on demand will continue the strong growth it experienced in 2004 and more programming will be offered in HDTV format, prompting an increase in sales of televisions and tuners that can receive those signals. Meanwhile, radio will follow the path taken by cable television in the early 80s. As satellite radio takes hold as the new “edgier” alternative to traditional radio, people will get more used to the idea of paying for radio. However, they will also require that those services be offered over the Internet as well as over the proprietary networks like XM and Sirius.

But not all content will be coming from big corporations. The grassroots will also play a key role in the distribution of online media in 2005. While podcasting has been the domain of a few geeks in 2004, easier to use tool will bring the phenomenon to the forefront and expect more audio services to be available from regular users. Following on the tail of this phenomenon will be an increase in videocasting from individuals. Much of it will be disappointing but a few gems will emerge, creating new stars who will emerge from the Internet and move on to more traditional media, based on the fame of their online offerings.

Business

Mergers and acquisitions will dominate the software world this year, as more companies realize that the only way into the enterprise is through a complete set of offerings. Expect several multi-billion dollar mergers and/or acquisition. In my mind, McAfee will be acquired or merge with either Symantec or CA; SAP will be acquired by Microsoft; Business Objects will be acquired by Oracle. As holds true for such precise predictions, none of this will actually happen the way I predicted it.

In late 2004, IBM left the personal computer business, selling its unit to Lenovo, a Chinese manufacturer. Expect the same to happen to at least one other PC vendor this year as the margins on personal computers continue to decrease, turning them into commodities.

Apple

Apple, which to date has resisted the price pressures other computer manufacturers have experienced, will introduce a cheaper version of their Macintosh. This, however, will not stem the continuing loss of market share they are experiencing. As Linux continues to grow, the Apple story in the computer business becomes more and more difficult and the company will increasingly rely on the consumer device business as its savior, building a new economy around the success of the iPod and iTunes music store.

The company will not, however, release a video player this year. Among some of the new features I would envision coming from Apple are:

• A flash-based iPod, which will be even smaller than the iPod mini and will be in the $100-$150 price range
• A partnership with a phone company to create a phone that will be able to download music from a special version of the iTunes music store and play MP3 ringtones
• An iPod with audio recording built-in
• A portable camera with iPod-like features
• A new way to send pictures from the iPod directly to printer via Airport express

While it focuses on the music business, Apple will not spend much time updating its laptop business. Adoption will drop in that part of the business as PC vendors start selling sub-$500 laptop PCs, making the iBook look expensive by comparison. Apple will try to enter the low cost market but not with a laptop: they will introduce a mac without monitor for under $500, offering integration with the iPod, and plugs to attach the computer to a television as its major features.

On the software end, the company will introduce a Word Processor and Spreadsheet program. They will release them, along with Keynote, as a complete package named iWork which will be aimed at students and small businesses. The package will be available for free on new computers.

Development

Blogs and RSS will continue their growth and will move strongly within the enterprise space. Adoption of RSS will continue its explosive growth but crest in 2005 as users start trying to find ways to cope with the information overload. New components in RSS readers will attempt to help organize RSS feeds but those basic efforts will initially fail and discussions will be set towards the end of the year as to the effective way to organize large amounts of data.

Weblogs and content management systems will start covering some of the same ground and enterprise will start using weblogs internally at the departmental level. Meanwhile, external employee weblogs will start becoming the focus of more litigations as corporation try to retain their intellectual property and fight the kind of transparency that comes from having employees talk openly on the web. Internal rules and regulations will be set in how employees can use blogs.

Meanwhile, in the development world, Service Oriented Architectures will continue being the approach to delivering next generation services. SOA will grow largely internally but some companies will start exposing some web services via XML to their partners. A new set of interesting new applications will come out as a result of those exposures.

Security and trust will continue to be big subjects and I suspect that trust will become an even bigger one with new standards emerging around the concept but no general agreement as to the best implementation.

Open source software will continue its strong growth, getting into more and more specialized fields. With the delays in delivery of Microsoft’s next operating system, Linux will continue to grow but complaints about price will start to arise. While the open source movement has offered free software, there will continue to be an increase in the price of supported version of the software.

Personal

I’ll promise to update the blog more often, will do OK for a little while and will then fall back into my regular pattern of a couple of updates a week. Or not… Either way, only the new year will tell.

Tristan Louis is the founder and CEO of Keepskor and writes the influential tnl.net weblog, where this was initially posted under the title 2005 Predictions. You can follow him on twitter here or receive his weekly newsletter by subscribing here.

HideAgent	rv:1.4
HideAgent	3.01
HideAgent	3.02
HideAgent	4.01
HideAgent	5.0
HideAgent	5.01
HideAgent	5.12
HideAgent	5.13
HideAgent	5.14
HideAgent	5.15
HideAgent	5.16
HideAgent	5.17
HideAgent	5.21
HideAgent	5.22
HideAgent	5.23
HideAgent	5.5
HideAgent	6.0
HideAgent	348NorthNews
HideAgent	Alcatel-
HideAgent	almaden.ibm.com/cs/crawler
HideAgent	AmphetaDesk
HideAgent	antibot
HideAgent	AppleWebKit
HideAgent	http://Ask.24x.Info/
HideAgent	ASPseek
HideAgent	aspseek
HideAgent	augurfind
HideAgent	AvantGo
HideAgent	Awasu
HideAgent	Baiduspider
HideAgent	BarraHomeCrawler
HideAgent	BBot
HideAgent	BFS_method
HideAgent	Bilbo
HideAgent	Bison
HideAgent	Blazer
HideAgent	blo.gs
HideAgent	BlogBot
HideAgent	Blogdigger
HideAgent	Blogosphere
HideAgent	BlogPulse
HideAgent	BlogShares
HideAgent	Blogwise
HideAgent	boitho.com
HideAgent	bookwatch@onfocus.com
HideAgent	books@onfocus.com
HideAgent	BorderManager
HideAgent	brainoff.com/geoblog/
HideAgent	www.business-socket.com
HideAgent	Camino
HideAgent	CE-Preload
HideAgent	Check and Get
HideAgent	china
HideAgent	China
HideAgent	CJNetworkQuality
HideAgent	cloakBrowser
HideAgent	combine
HideAgent	COMBINE
HideAgent	compatible)
HideAgent	CoolBot
HideAgent	CoologFeedSpider
HideAgent	CopyHunter
HideAgent	curl
HideAgent	DA
HideAgent	danux
HideAgent	Dattatec.com-Sitios-Top
HideAgent	daypopbot
HideAgent	DoCoMo
HideAgent	DTS
HideAgent	Ecosystem/development
HideAgent	EgotoBot
HideAgent	Elaine
HideAgent	EmailSiphon
HideAgent	Ericsson
HideAgent	ETS
HideAgent	eXactSite
HideAgent	Exalead
HideAgent	exactseek.com
HideAgent	EyeOnSite
HideAgent	fantomBrowser
HideAgent	fantomCrew
HideAgent	FAST
HideAgent	Fast
HideAgent	FavOrg
HideAgent	FeedDemon
HideAgent	Feedreader
HideAgent	FeedOnFeeds
HideAgent	Feedster
HideAgent	FeedValidator
HideAgent	Fetch
HideAgent	Finder
HideAgent	FlickBot
HideAgent	Franklin
HideAgent	Frontier
HideAgent	Gaisbot
HideAgent	GalaxyBot
HideAgent	Genome
HideAgent	GetRight
HideAgent	Gigabot
HideAgent	grub-client
HideAgent	Google*
HideAgent	gossamer-threads.com
HideAgent	htdig
HideAgent	HTTrack
HideAgent	ia_archiver
HideAgent	iaea.org
HideAgent	iCab
HideAgent	Industry
HideAgent	Indy
HideAgent	INGRID/3.0
HideAgent	InternetSeer
HideAgent	internetseer
HideAgent	IUFW
HideAgent	IUPUI
HideAgent	IXE
HideAgent	Jakarta
HideAgent	janes-blogosphere
HideAgent	Java
HideAgent	jBrowser
HideAgent	jiffe
HideAgent	junkbuster
HideAgent	k2spider
HideAgent	Lachesis
HideAgent	lachesis
HideAgent	larbin
HideAgent	Leknor.com
HideAgent	Liberate
HideAgent	libwww-perl
HideAgent	Lincoln
HideAgent	Linkbot
HideAgent	LinkHype
HideAgent	Links
HideAgent	LinksManager.com
HideAgent	LinkSweeper
HideAgent	LinkWalker
HideAgent	LNSpiderguy
HideAgent	Lynx*
HideAgent	MagpieRSS
HideAgent	Microcomputers
HideAgent	Missauga
HideAgent	Missigua
HideAgent	Mitsu
HideAgent	mogimogi
HideAgent	MOT-
HideAgent	Mozilla/3.04
HideAgent	Mozilla/3.04Gold
HideAgent	Mozilla/4.04
HideAgent	Mozilla/4.05
HideAgent	Mozilla/4.06
HideAgent	Mozilla/4.08
HideAgent	Mozilla/4.5
HideAgent	Mozilla/4.51
HideAgent	Mozilla/4.6
HideAgent	Mozilla/4.61
HideAgent	Mozilla/4.7
HideAgent	Mozilla/4.8
HideAgent	MSFrontPage
HideAgent	MSNBOT
HideAgent	MyHeadlines
HideAgent	MyWireServiceBot
HideAgent	NationalDirectory
HideAgent	NaverRobot
HideAgent	NCBrowser
HideAgent	Netcraft
HideAgent	NetNewsWire
HideAgent	NetResearchServer
HideAgent	NewsGator
HideAgent	Newz
HideAgent	NG/1.0
HideAgent	NIF
HideAgent	NITLE
HideAgent	nntp//rss
HideAgent	Nokia
HideAgent	NPBot
HideAgent	NRK-bruker
HideAgent	Openbot
HideAgent	Opera
HideAgent	Oddbot
HideAgent	Offline
HideAgent	OPWV-SDK
HideAgent	Oracle
HideAgent	Panasonic
HideAgent	PEAR
HideAgent	PHILIPS-
HideAgent	PHP
HideAgent	Pix
HideAgent	PocketFeed
HideAgent	Pompos
HideAgent	Popdexter
HideAgent	PostNuke
HideAgent	Powermarks
HideAgent	psbot
HideAgent	Python-urllib
HideAgent	QuepasaCreep
HideAgent	Radio*
HideAgent	Rainbow
HideAgent	rdflib
HideAgent	Robozilla
HideAgent	RPT-HTTPClient
HideAgent	SAGEM-
HideAgent	SAMSUNG
HideAgent	Scrubby
HideAgent	SHARP-
HideAgent	SideWinder
HideAgent	slurp@inktomi.com
HideAgent	Scooter
HideAgent	searchspider.com
HideAgent	SearchSpider.com
HideAgent	SEC-
HideAgent	semanticdiscovery
HideAgent	SIE-
HideAgent	SharpReader
HideAgent	Shareware
HideAgent	SlimBrowser
HideAgent	Snoopy
HideAgent	SOFTWING_TEAR_AGENT
HideAgent	SonyEricsson
HideAgent	spider@spider.ilab.sztaki.hu
HideAgent	SpiderKU
HideAgent	Spinne
HideAgent	SmartDownload
HideAgent	stealthBrowser
HideAgent	Steeler
HideAgent	SuperBot
HideAgent	SurveyBot
HideAgent	Sweeper
HideAgent	Syndic8
HideAgent	Syndirella
HideAgent	Syndigator
HideAgent	Tagword
HideAgent	Technoratibot
HideAgent	Teleport
HideAgent	Teoma
HideAgent	Teradex
HideAgent	Terrar
HideAgent	T-H-U-N-D-E-R-S-T-O-N-E
HideAgent	timboBot
HideAgent	TurnitinBot
HideAgent	http://www.tutorgig.com/
HideAgent	UltraLiberalFeedParser
HideAgent	Vagabondo
HideAgent	verzamelgids
HideAgent	VoilaBot
HideAgent	W3C_Validator
HideAgent	w3m
HideAgent	www.walhello.com
HideAgent	www.wapsilon.com
HideAgent	WebCapture
HideAgent	Webclipping
HideAgent	WebFilter
HideAgent	WebGather
HideAgent	WebGo
HideAgent	WebRACE
HideAgent	websitealert.net
HideAgent	WebStripper
HideAgent	WebTV
HideAgent	WebZIP
HideAgent	WEP
HideAgent	Wget
HideAgent	Wildgrape
HideAgent	WinHttp.WinHttpRequest
HideAgent	Xenu
HideAgent	Zealbot
HideAgent	ZyBorg

I will publish a webalizer.conf file soon for people who don’t want to bother with making all the changes themselves.

Tristan Louis is the founder and CEO of Keepskor and writes the influential tnl.net weblog, where this was initially posted under the title Webalizer.conf hacking: HideAgent. You can follow him on twitter here or receive his weekly newsletter by subscribing here.

The AIM client allows any users on the Internet to create a “buddy list” and carry on text-based chat with other people on their buddy list. With 27 million AOL users and 21 million registered AIM users, America Online has become the leading provider of instant messaging software, dwarfing its competitors in terms of user base. According to MediaMetrix, Yahoo Messenger is the second most popular instant messaging client, with 10.6 million users, followed by Microsoft’ MSN Messenger, with 10.3 million registered users.

AOL has aggressively promoted its AIM messaging platform as a corporate tool, cutting deals with Novell and Lotus to incorporate it in their offerings. However, its focus on security issues has not been as strong as its marketing. In the past AOL has covered up security breaches instead of being forthcoming about them, said Dave Cassel, editor of the AOL Watch Newsletter, an email mailing list sent out to 50,000 subscribers.

Two areas in which AIM security has already been compromised are password theft and buffer overflow, a way for hackers to remotely crash a computer system by sending a certain set of characters to an AIM client. Furthering the problem is the fact that the client does not need to be running at the time in order to be exploited. Simply installing it on a machine is enough to expose it to the buffer overflow problem.

In January 2000, hackers were coming to the press with that problem because they wanted the buffer overflow security hole closed, said Cassel. But AOL didn’t respond so the hackers thought that negative press would spur AOL into action. After I wrote an article about it, AOL said they would close the hole but in December 2000, the hole could still be exploited.

In December, @Stake, an Internet security consulting firm, issued a security advisory about the buffer overflow problem. In it, the company described how a hacker could use the AIM client to shutdown a computer or execute local commands on the victim’s desktop.

The issue was fixed, said Nicholas Graham, a spokesperson for AOL. We encourage our users to upgrade but it’s not an issue at this point.

Weld Pond, manager of research and development for @Stake, added that while the December issue was not exactly the same one as the January one, it did fall into the same class of problems. What that illuminates is the fact that they are not using secure policies, he said. It’s sort of like finding out that one of your windows has no lock and not going around to check the other windows.

We answer instances of security on a case by case basis, defends Graham. Our latest client is the most secure one to date and we intend to continue providing a more robust and more secure client as time goes on.

Buffer overflow and the hijacking of AIM screen names have been problems since AIM was introduced a few years back, said an active AOL hacker who preferred to remain anonymous. Product integrity and security has never been a specialty of AOL and this is very obvious from the numerous exploits I and others have found in the service in the past three years.

While AOL has issued a new version of its client correcting the problem, the security risks posed by the AIM client should remain a concern among system administrators. The funny thing is that upgrading to the most recent version of AIM solves nothing, said the hacker. Most of the exploits are what we call server side hacks, which means the software client has nothing to do with the hack at all. The buffer overflow hack was the only major hack so that involved the actual client software.

Some of my buddies used the hijacked AIM accounts to carry on fake conversations with the friends of the person who originally owned it. The conversations resulted in my buddies tricking the real owner’s friends into providing personal information and even credit card information. People have no reason to believe that accounts have been hacked unless the real owner notifies them.

This was the problem that Habeeb Dihu, a senior principal at Diamond Cluster, an ebusiness consulting firm., encountered when a hacker kidnapped his instant messenger ID. I was working on the Covisint deal, he said, referring to the B2B exchange developed by General Motors, Chrysler, Ford, Oracle, and Commerce One.

Because we have consultants working at several clients, the way we keep in touch with each others is through instant messaging. Somewhere in the middle of the Covisint deal, my AIM screen ID got hacked. Someone masqueraded as me and started to talk to my coworkers. I took care of it by alerting all my co-workers but AOL was very unresponsive in terms of tech support. I was completely ignored by the support people there and was finally contacted by the head of press relations for AOL after I talked to the press. Relative to how much AIM is used in the corporate world, the security behind this thing is abysmal.

Following the incident, the company instituted a review of different instant messaging solutions and standardized on Yahoo’s Instant Messenger. Despite the fact that you could have some ID theft issue behind Yahoo, no one has managed to hack into the yahoo user database to the extent of the problems with MSN and AOL, he added. We looked at Yahoo’s corporate solution but the cost of corporate yahoo was prohibitive compared to the free products available out there, he said, adding that his company has been involved in the development of Jabber, another IM client. Our hope is that jabber will increase security and we’ll be able to migrate there but it’s not quite there yet in terms of robust user interface for non technical people.

Instant Messaging is used as much if not more than email these days in the corporate world. The lack of security and lack of completeness in the solution is pretty alarming from my perspective. The only messaging solution that hasn’t been hacked is Yahoo’s and it’s only a matter of time before it happens.

If you just want to talk to people in your company, you’re better off using some other piece of software that wouldn’t be under as much scrutiny from hackers, said Cassel.

Using a third party to do your corporate communication that has no legal standing is a dangerous thing, said Pond. Unlike the phone, it’s unregulated and insecure. When you are using AOL IM, you’re sending your communication in the clear over the Internet to AOL’s server and back, whether you are talking to someone in a remote location or in the office next door. People think of it as the phone but they shouldn’t. AOL has full control of communication for corporations who use AIM for communication.

We’re moving to a world were there are more and more clients that people are running on their machines, out of the control of the IT department. Companies should set security policies set up at corporate level and work on an approval process for those clients.

However, there’s no one size fits all solution. Different environments can put the expense out there to create more secure environments. Thinking you can sort of read about a security problem and know what the best solution is without taking the environment into consideration is not possible.

There are far better products out there such as MSN Messenger and Yahoo Messenger, said the hacker. But these products haven’t taken off in popularity due to AOL’s huge market share. These other products are far more secure and reliable than the AIM service. Any hacker will tell you this.

Network managers can solve the issue by either blocking out connection to the AOL IM servers or install different clients on their users’ desktops. Groove is doing a similar kind of tool but it’s an encrypted chat in a peer to peer environment, which ends up being more secure, said Pond.

If you have to use it, spend as little time as possible on it, adds Cassel. When I’m through with my messaging conversation, I close it out the software in both my window and my tray. Yes, I can’t be messaged but I also can’t be hacked. I just keep my email window open and then people can reach me that way. Your email client is definitely more secure than IM.”

Tristan Louis is the founder and CEO of Keepskor and writes the influential tnl.net weblog, where this was initially posted under the title AIM Not Secure. You can follow him on twitter here or receive his weekly newsletter by subscribing here.