Post AqSWmPbkKF1wKGmCeW by ddlyh@topspicy.social
(DIR) More posts by ddlyh@topspicy.social
(DIR) Post #AqSTzQ1PnWMTVoIFWK by foone@digipres.club
2025-01-26T01:19:26Z
0 likes, 0 repeats
doing some ICQ research and I found that LICQ's homepage is still online, with zero hint that it hasn't been updated in 11 years:http://licq.org/
(DIR) Post #AqSUDJshQPZiWOqSbw by foone@digipres.club
2025-01-26T01:22:01Z
0 likes, 0 repeats
@90sCraig yeah, I saw the AIM server stuff, and that's what made me wonder about ICQ again. As far as I know there's no equivalent for the ICQ protocol, yet. So I'm trying to find information on how the protocol worked
(DIR) Post #AqSUb0daclLJmw4dVY by foone@digipres.club
2025-01-26T01:26:19Z
0 likes, 0 repeats
I found someone who said they wrote a server in perl and it's open source and if anyone wants it they can just askhttps://lists.wireshark.org/archives/ethereal-users/200008/msg00168.htmlthat post is 25 years old, do you think that offer is still good?
(DIR) Post #AqSV6nJBiV9niQgfqq by foone@digipres.club
2025-01-26T01:32:02Z
0 likes, 0 repeats
okay this page has documentation of the v4 protocol:https://web.archive.org/web/19991005224713/http://www.globalserve.net/%7Ejphowe/icq/
(DIR) Post #AqSV9r2QJ4dq9SIy6C by foone@digipres.club
2025-01-26T01:32:25Z
0 likes, 0 repeats
HOWEVER they used frames and an imagemap for navigation, and the internet archive didn't get the image. which makes navigating it a bit of a pain
(DIR) Post #AqSVeQka5swJbAXUWG by foone@digipres.club
2025-01-26T01:38:11Z
0 likes, 0 repeats
@grumpygamer terrible. you deserve those x-ray specs
(DIR) Post #AqSViGUs9pn0xN1J4q by foone@digipres.club
2025-01-26T01:38:50Z
0 likes, 0 repeats
@yuki it works with the later versions of ICQ, which were basically just ICQ-themed versions of AIM. So it's not what I'm looking for
(DIR) Post #AqSVtndRI6TyuzWkCG by foone@digipres.club
2025-01-26T01:40:56Z
0 likes, 0 repeats
got as many pages from there as I could (one is missing, the chat one), and got this for v5 info:https://web.archive.org/web/20010108011900/http://www.algonet.se/~henisak/icq/icqv5.html
(DIR) Post #AqSVwrHiB7zt6cp4i0 by foone@digipres.club
2025-01-26T01:41:16Z
0 likes, 0 repeats
and the v2 spec is here: https://web.archive.org/web/20010126060900/http://www.d.kth.se/~d95-mih/icq/spec/v2/icq091.txt
(DIR) Post #AqSW1EZ7YxwkT63Iy8 by foone@digipres.club
2025-01-26T01:42:19Z
0 likes, 0 repeats
apparently v3 never was really used, so the important versions are v2, v4, and v5. I think that ICQ 99a/b used v4, ICQ 2000 used v5, and previous less common versions used v2/v1.
(DIR) Post #AqSW4jR9ExVT5CzVAW by jbaggs@infosec.exchange
2025-01-26T01:42:51Z
0 likes, 0 repeats
@foone 25 year old perl code. Is there anyone who can still say what it does and why?
(DIR) Post #AqSW8bIFSYzWz6fmcK by xan@xantronix.social
2025-01-26T01:43:06Z
0 likes, 0 repeats
@foone the aesthetic flourish of the "::" double colon is everything to me
(DIR) Post #AqSWCgzwBxGbps3kLA by foone@digipres.club
2025-01-26T01:44:20Z
1 likes, 0 repeats
and here's a compilation of icq-devel mailing posts about the v4 protocol:https://web.archive.org/web/20010208232145/http://www.d.kth.se/~d95-mih/icq/spec/v4/v4-notes.txt
(DIR) Post #AqSWGvxYVUdDOdy3do by foone@digipres.club
2025-01-26T01:45:06Z
0 likes, 0 repeats
a senior project about v5, which has some info:http://www.carfield.com.hk/document/networking/icq_protocol.html
(DIR) Post #AqSWPjRAQz9DAJ0txg by nabijaczleweli@101010.pl
2025-01-26T01:46:39Z
0 likes, 0 repeats
@foone rare case of the upstream site out-living the debian package (dropped in 2016: https://bugs.debian.org/823111)
(DIR) Post #AqSWfENreoVzULrKjY by foone@digipres.club
2025-01-26T01:49:23Z
0 likes, 0 repeats
well ICQ99 seems to work on windows 10, so that's good. Sadly I can't register my ICQ number.
(DIR) Post #AqSWjQSShwgE5u0fzs by foone@digipres.club
2025-01-26T01:50:16Z
2 likes, 0 repeats
fun fact about this era of the ICQ protocol: It's apparently entirely UDP based, and I think it does UDP directly between users as well, rather than the server.In other words, it's exactly the kind of internet program that only made sense in 1996-1999 before NAT was a widespread thing
(DIR) Post #AqSWmPbkKF1wKGmCeW by ddlyh@topspicy.social
2025-01-26T01:50:30Z
0 likes, 0 repeats
@foone... Are you planning to relaunch ICQ with a new server as a service for anyone who still has a client??
(DIR) Post #AqSWpXc90wcW1gSGCu by foone@digipres.club
2025-01-26T01:51:21Z
0 likes, 0 repeats
@ddlyh thinking about it yeah. specifically for the 1999-2000 clients, before it became AIM-flavored
(DIR) Post #AqSX1XDkIrAwHSlHTE by Crow@pagan.plus
2025-01-26T01:53:25Z
0 likes, 0 repeats
@foone but that means it might be salvageable as an e2ee adhoc system
(DIR) Post #AqSXITl2QphKSmPh8i by foone@digipres.club
2025-01-26T01:56:38Z
0 likes, 0 repeats
their were proxies almost immediately, which used a local program that talked over HTTP to a remote server that then did UDP to the target (or their proxy) because any NAT, firewall, or proxy situation completely broke this
(DIR) Post #AqSXQaJ5xvDh5mCyv2 by Farbs@mastodon.social
2025-01-26T01:58:01Z
0 likes, 0 repeats
@foone I miss when anyone could send to anyone, rather than requiring a third party (usually commercial) to mediate :(
(DIR) Post #AqSY5yQxASB5nDcUPw by foone@digipres.club
2025-01-26T02:05:32Z
0 likes, 0 repeats
why doesn't my "gaming laptop" have wireshark already installed. this system is barely usable
(DIR) Post #AqSYC2VCxAzg9IVCFc by sun@shitposter.world
2025-01-26T02:07:04.696636Z
3 likes, 1 repeats
@foone it used a centralized server for identity and finding clients and then established a direct p2p connection between clients (that could be trivially spoofed)
(DIR) Post #AqSYe3LhOoTysoPd5M by feld@friedcheese.us
2025-01-26T02:09:44.274043Z
0 likes, 0 repeats
@sun @foone When did ICQ and AIM end up being the same protocol? (OSCAR)
(DIR) Post #AqSYe48GUFKZJR8Pmi by sun@shitposter.world
2025-01-26T02:12:07.565106Z
0 likes, 1 repeats
@feld @foone I don't know but I bet it was when they wanted to add encryption
(DIR) Post #AqSYlYIwhnZiuvhUqu by foone@digipres.club
2025-01-26T02:13:06Z
0 likes, 1 repeats
a computer needs a hex editor, packet capture, Good text editor, SSH client, ghidra or ida, decompilers for C# and java, C compiler, pythons (2 and 3), binxelview, Dependencies viewer, DOSBox, UNP, at least one unity unpacker, debugger, relative-searcher, yychr, and emulators for at least 12 consoles & home computers. otherwise it's just a toy, like a Nintendo.
(DIR) Post #AqSYldeOpShtUumCUC by Yuki@groupe-tazor.com
2025-01-26T01:30:00.645Z
1 likes, 0 repeats
@foone@digipres.club I'd trust more the one who reimplemented a AIM server fairly recently, apparently it also works with ICQhttps://github.com/mk6i/retro-aim-server
(DIR) Post #AqSZ8dWDUBSvkTuni4 by foone@digipres.club
2025-01-26T02:17:14Z
0 likes, 0 repeats
@feld @sun@shitposter.world I think in the 2001 release? but I can't find details.
(DIR) Post #AqSZBlpl1iMsPGY96O by tekhedd@byteheaven.net
2025-01-26T02:17:32Z
0 likes, 0 repeats
@foone Both Python 2/3? With multiple simultaneously available environments for backward lib compatibility? You may be pushing the bounds of plausibility here. Otherwise, yup, sounds normal.
(DIR) Post #AqSZIYpdlXQQ6ojUrw by Infoseepage@mastodon.social
2025-01-26T02:18:59Z
0 likes, 0 repeats
@foone Everyone was on dialup and handed an IP. Direct computer-computer stuff was pretty common. I remember playing a lot of games that way, direct client-client without a games server somewhere.
(DIR) Post #AqSZgWJQmicFFF5kyO by Infoseepage@mastodon.social
2025-01-26T02:23:18Z
0 likes, 0 repeats
@foone I remember when my house first graduated to two computers and we wanted to share internet. Had a program on one that would dial in and establish a connection and then act as the router for the other computer. The networking was done over 3com 509 series isa cards with coaxial connectors. I was eventually one of the first ordinary consumers in the nation to get a DSL connect, an SDSL connection via Speakeasy 384k both ways baby!
(DIR) Post #AqSZq5UbM4twxbsYDI by foone@digipres.club
2025-01-26T02:25:04Z
0 likes, 0 repeats
hmm, I'm using ICQ 99b and it seems to be sending version 5 packets? interesting
(DIR) Post #AqSa3lGPMXPmH9lBp2 by foone@digipres.club
2025-01-26T02:27:34Z
0 likes, 0 repeats
packets are encrypted which is a Pain.the encryption is trivially breakable but it means I can't use wireshark to see the packet contents.unless I add support to wireshark, which sounds like A Project in itself
(DIR) Post #AqSaAFdhL6uEDnkSw4 by ericgus@mastodon.social
2025-01-26T02:28:40Z
0 likes, 0 repeats
@foone Well if you are going down a rabbit hole, why not see how far down it goes.. ?
(DIR) Post #AqSaHZoiiXTupSOg9A by foone@digipres.club
2025-01-26T02:30:03Z
0 likes, 0 repeats
@ericgus I'm already going down too many of those!
(DIR) Post #AqSaQbR04bFYS3bdvE by mhoye@mastodon.social
2025-01-26T02:31:38Z
0 likes, 0 repeats
@foone @ericgus The last committer to the ICQ codebase is still active on Github this year, maybe you could just ask?
(DIR) Post #AqSaTVeM2KsvNbEqjA by Darius@mastodon.cloud
2025-01-26T02:32:00Z
0 likes, 0 repeats
@foone wireshark dissectors are petty easy to write…
(DIR) Post #AqSajAA7h8ebN1Yuum by foone@digipres.club
2025-01-26T02:35:01Z
0 likes, 0 repeats
oh I can write lua (eww, for low level binary stuff?) dissectors. that'll make this slightly easier
(DIR) Post #AqSaswt5u8hX5zGO92 by foone@digipres.club
2025-01-26T02:36:50Z
0 likes, 0 repeats
I'm gonna write python code to decode a packet from these docs and then I'll convert that to lua. writing it in lua the first time will be too painful, when I don't fully understand how this nonsense works
(DIR) Post #AqSawMxhPwLqpf33ku by foo@fosstodon.org
2025-01-26T02:37:22Z
0 likes, 0 repeats
@foone If it helps for reference, I once wrote a Wireshark lua dissector for 2ping, a low-level UDP protocol. Though as a warning, I haven't looked at it in about a decade, so it may not even work anymore.https://github.com/rfinnie/2ping/tree/main/wireshark
(DIR) Post #AqSbTCoCBiVMtmGDbs by Sundrop@gelatino.us
2025-01-26T02:37:34.363Z
0 likes, 0 repeats
@foone@digipres.club @ericgus@mastodon.social is it strictly a proprietary archival protocol or is there a daemon available for it?
(DIR) Post #AqSbTDyVqqLsW45yKW by foone@digipres.club
2025-01-26T02:43:16Z
0 likes, 0 repeats
@Sundrop @ericgus there's no daemon for this version, no
(DIR) Post #AqSbWEEvK7zsCpChjU by foone@digipres.club
2025-01-26T02:43:27Z
0 likes, 0 repeats
@foo thanks!
(DIR) Post #AqSd9j24s1uaxKantg by Animadoria@mastodon.world
2025-01-26T03:01:57Z
0 likes, 0 repeats
@foone ICQ 2000 and so on used OSCAR, the same protocol as AIM. I know it -- I've reverse engineered a server already. OSCAR was the same protocol as AIM - and it's far much more sane.ICQ pre-2000 uses the obnoxious Mirabilis protocol. v2 was the first known protocol if I remember correctly, used by the Java client. v3, maybe the groupware version; and beta 98 versions.
(DIR) Post #AqSf391446kZQM6n2G by foone@digipres.club
2025-01-26T03:23:23Z
0 likes, 0 repeats
how is this decryption supposed to work if it starts at offset 10 and then does it in 4-byte chunks but the packet is 28 bytes long?
(DIR) Post #AqSf67OqX16RHOeNeK by foone@digipres.club
2025-01-26T03:23:37Z
0 likes, 0 repeats
maybe I just need to pad all packets and they forgot to mention that
(DIR) Post #AqSg60k7NizqaV730y by StompyRobot@mastodon.gamedev.place
2025-01-26T03:35:05Z
0 likes, 0 repeats
@foone don't forget "everything" by voidtools
(DIR) Post #AqSgB2TENysDOTby0e by StompyRobot@mastodon.gamedev.place
2025-01-26T03:36:05Z
0 likes, 0 repeats
@foone coverting python to Lua is actually a thing the chatgpts may help accelerate.
(DIR) Post #AqSgW2rM8NnSgKucNM by foone@digipres.club
2025-01-26T03:39:55Z
0 likes, 0 repeats
wait! Wireshark DOES support ICQ, it just didn't detect it in this case. Awesome
(DIR) Post #AqSgqb4scbbSbD2PKa by engarneering@floss.social
2025-01-26T03:43:31Z
0 likes, 0 repeats
@foone i remember my 7 digit one, but the account is lost to history
(DIR) Post #AqSh0uigRq7oPhZiaW by yuubi@furry.engineer
2025-01-26T03:45:26Z
0 likes, 0 repeats
@foone "For Admin Use" 👀
(DIR) Post #AqSh44HVM2qOwAMmR6 by foone@digipres.club
2025-01-26T03:45:59Z
0 likes, 0 repeats
okay, my client is just sending the command CMD_NEW_USER_1 over and over, which is a "ask for permission to make a new user" command. I don't know what the reply is supposed to be
(DIR) Post #AqSh8l1GOhlAe40Q1Q by foone@digipres.club
2025-01-26T03:46:55Z
0 likes, 0 repeats
@yuubi that lets you select what server to talk to. so I'm setting it to my local server running netcat -lu instead of the long dead icq server
(DIR) Post #AqShlRTWznDlK9fr0a by foone@digipres.club
2025-01-26T03:53:52Z
0 likes, 0 repeats
my code doesn't work yet, but I did find where it's implemented in wireshark, and there's some Suspicious offset checks:https://github.com/giuliano108/wireshark-rtpmon/blob/master/epan/dissectors/packet-icq.c#L428
(DIR) Post #AqShygpDElO6h98GHo by foone@digipres.club
2025-01-26T03:56:15Z
0 likes, 0 repeats
I started to open up ICQ in Ghidra to see if I could find any info there, but there are 38 DLLs/EXEs here. HOW MUCH CODE DO YOU NEED, MAN?
(DIR) Post #AqSiRN8rUtYu2y03lI by foone@digipres.club
2025-01-26T04:01:26Z
0 likes, 0 repeats
I missed the 11 that it dropped in C:\Windows\SysWOW64
(DIR) Post #AqSiU5UzYB5QCFe6a0 by foone@digipres.club
2025-01-26T04:01:42Z
0 likes, 0 repeats
that's 49 executables, not counting the OCX
(DIR) Post #AqSijdvvo1QZKxfEPI by foone@digipres.club
2025-01-26T04:04:47Z
0 likes, 0 repeats
not sure why it dropped a 16-bit DLL as well
(DIR) Post #AqSixLn83PRR7o5ChE by tedmielczarek@mastodon.social
2025-01-26T04:07:12Z
0 likes, 0 repeats
@foone you can have mine, I haven't used it in ages: 249279 (I still remember it though, for some reason )
(DIR) Post #AqSjl3H7Ah6UB0o9gW by jpm@aus.social
2025-01-26T04:16:08Z
0 likes, 0 repeats
@foone so it works with Trumpet Winsock (may or may not be a shitpost)
(DIR) Post #AqSkDZCe3e2jJ8JYB6 by foone@digipres.club
2025-01-26T04:21:20Z
0 likes, 0 repeats
@jpm I don't think the rest of the software would work with win 3.1, though. Maybe an older version did, and they just forgot to remove the DLL?
(DIR) Post #AqSkGXgo8pV3TxqEjo by foone@digipres.club
2025-01-26T04:21:36Z
0 likes, 0 repeats
icqsock.dll has a lot of interesting functions, so I'm looking at that one first
(DIR) Post #AqSkJxtDBdO9bpH8VM by indigoparadox@mastodon.social
2025-01-26T04:22:29Z
0 likes, 0 repeats
@foone "I was going to call it System64, but in the middle of naming it I just thought, 'WOW! Nature is beautiful!'"
(DIR) Post #AqSkxsND7BOO5IL1k0 by jpm@aus.social
2025-01-26T04:29:40Z
0 likes, 0 repeats
@foone entirely possible. Wonder how many of those other DLLs are vestigial?
(DIR) Post #AqSmiCUWkTm5kpPhYm by foone@digipres.club
2025-01-26T04:49:15Z
0 likes, 0 repeats
this is complicated and involves a lot of DLLs.I'm gonna need some kind of tracing system for this
(DIR) Post #AqSnw5RLrTrZtT76KO by kreskenn@mastodon.social
2025-01-26T05:02:57Z
0 likes, 0 repeats
@foone good luckThis seems hellish
(DIR) Post #AqSr73mAgmfpmQmAEK by vmp_@mastodon.social
2025-01-26T05:38:28Z
0 likes, 0 repeats
@foone one per packet type?
(DIR) Post #AqSsb75f1yGMhWmoRE by barubary@infosec.exchange
2025-01-26T05:55:07Z
0 likes, 0 repeats
@foone It's on the web: https://dflund.se/~pkj/
(DIR) Post #AqSu9rdOaT9cr4hRke by xarph@rusty.cat
2025-01-26T06:12:43Z
0 likes, 0 repeats
@foone i read this like the "looking for a man in finance" monologue
(DIR) Post #AqSv4u00T4GohATQum by foone@digipres.club
2025-01-26T06:23:03Z
0 likes, 0 repeats
@barubary ooh, thanks!
(DIR) Post #AqTAzwESKvQ9RJt4ZU by pzriddle@mstdn.io
2025-01-26T09:21:15Z
0 likes, 0 repeats
@foone @futurebird I agree in principle, although as a vintage 20th-century programmer I don't know what half this stuff is.But I'll tell you what I miss on phones and other locked-in devices: a shell prompt and full filesystem access.
(DIR) Post #AqTDGs65ACgnRjAleq by foone@digipres.club
2025-01-26T09:46:52Z
0 likes, 0 repeats
@pzriddle @futurebird amusingly I'm using most of this for 20th century programming: as in, I'm hacking old 80s and 90s programs by using 2020s tools
(DIR) Post #AqTWQeg9nyKjr6QPxY by datenwolf@chaos.social
2025-01-26T13:16:15Z
0 likes, 0 repeats
@indigoparadox @foone not sure if shitpost or honest, but: there's a very good reason why there's no System64.
(DIR) Post #AqTWQfNlBrDC2KpEvI by foone@digipres.club
2025-01-26T13:21:30Z
0 likes, 0 repeats
@datenwolf @indigoparadox is it because of itanium?
(DIR) Post #AqTXw5b9rxQyH9diwC by datenwolf@chaos.social
2025-01-26T13:38:25Z
0 likes, 0 repeats
@foone @indigoparadox It's to account for hard coded System32 paths in applications and libraries. Less work to just put all the 64 bit stuff into sys32 than to force 3rd party devs to put work into fixing that when building for 64 bit. 64 bit stuff can see everything. 32 bit processes don't see SysWoW64 (which actually contains 32 bit stuff) as it is but get it transparently mapped into System32
(DIR) Post #AqTZaV7yTH9GzUp53A by Red_Shirt_no2@c.im
2025-01-26T13:56:55Z
0 likes, 0 repeats
@ericgus @foone Going to name our next ferret Foone (for reasons)
(DIR) Post #AqTajZJKO6CMWc1MS8 by foone@digipres.club
2025-01-26T14:09:46Z
0 likes, 0 repeats
@Red_Shirt_no2 @ericgus but I live in California! Ferrets are banned here!
(DIR) Post #AqTauBoc5ECCqBidZQ by Red_Shirt_no2@c.im
2025-01-26T14:11:42Z
0 likes, 0 repeats
@foone @ericgus Come to Free* Massachusetts!* for now..
(DIR) Post #AqUE19wXL4gVH1juSG by poleguy@mastodon.social
2025-01-26T21:29:56Z
0 likes, 0 repeats
@foone he's got a searchable name. Why not reach out? https://github.com/Saur2000
(DIR) Post #AqUMszAiOy758bY4nI by winden@mastodon.gamedev.place
2025-01-26T23:09:10Z
0 likes, 0 repeats
@foone I'd rather have a. Action replay MK3 + a copy of deluxe paint but... to each their own ;)
(DIR) Post #AqUNPgTavqcgi8yH8i by foone@digipres.club
2025-01-26T23:15:11Z
0 likes, 0 repeats
@poleguy it's been found!https://digipres.club/@barubary@infosec.exchange/113893108001812701
(DIR) Post #AqVoCihgERVXm4Yv4q by foone@digipres.club
2025-01-27T15:50:04Z
0 likes, 0 repeats
@arndissler I know, I'm aiming for a much older version of the protocol, which hasn't been supported since 2000 or so