[JDEV] help!

[Thomas Parslow (PatRat)]

> Hi there!
>
> We've got some developers making a really cool jabber IM 
> in java, and we've come upon a few things...
> Here is what I got from the developers:
>
> There seems to be a problem in the jabber server concerning 
> msn subscriptions.
> When you remove a subscription to an msn-contact the msn-contact 
> is not notified that you unsubscribed to him.
> Thus, when you add that person again he is never asked if he 
> wants to allow you to subscibe to him - the subscription is just made.
>
> I've experimented with the icq-transport on my own too, and found the
> same being true. To the ICQ contact it seems that I add him without his 
> permission...
>
> Is this general for all non-jabber transports?
>
>
> Regards,
>
> Lars

I don't know about the others, but this is what I know about ICQ:
ICQ uses a very insecure method for subscription requests, it is
actually handled *client* side! This means that with a quick patch you
can add anyone to your contact list even in the official client. It
would seem a bit pointless for the ICQ gateway to implement this
client side features :)

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying