[freenet-chat] Skype cracked

[Florent Daignière (NextGen$)]

* Matthew Toseland <toad at amphibian.dyndns.org> [2006-07-14 23:20:06]:

> Is there any evidence of reasonable crypto in skype? I have heard that
> it is encrypted, but no other VOIP is...?
> 

I've found some interresting slides about it :
http://actes.sstic.org/SSTIC06/Castle_in_the_Skype/SSTIC06-Desclaux-Castle_in_the_Skype.pdf
http://actes.sstic.org/SSTIC06/Castle_in_the_Skype/SSTIC06-article-Desclaux-Castle_in_the_Skype.pdf

they are less than a month old ... in french, sorry.

To sum up, it shows that skype is using many tricks to harden the
reverse-engeenering process... I don't like security by obscurity :p

NextGen$

> On Sat, Jul 15, 2006 at 12:14:43AM +0200, Magnus Eriksson wrote:
> > 
> > I thought this might be interesting:
> > 
> > 
> > Chinese Company: Skype Protocol Cracked
> > http://www.cio.com/blog_view.html?CID=22974
> > 
> >  "The 10-person Chinese company, which has received venture capital 
> > funding, is planning to release in two weeks three software components 
> > based on the Skype protocol that would allow developers to create 
> > compatible applications ..."
> > 
> >  "By cracking the Skype protocol, the company claims it can also block 
> > Skype voice traffic ..."
> > 
> > 
> > Original source:
> > 
> > Skype Protocol Has Been Cracked
> > http://www.voipwiki.com/blog/?p=16
> > 
> > 
> > So..
> > 
> >  "Software components that would allow developers to create compatible 
> > applications"
> > 
> > Fantastic!  So we have great stego for Freenet.  And it might even be 
> > possible to bounce traffic off Skype nodes (or, Freenet nodes using that 
> > "component").
> > 
> > But...
> > 
> >  "the company claims it can also block Skype voice traffic"
> > 
> > We're screwed.  :-)
> > 
> > 
> >   But I suppose it might be useful.  Another option, if nothing else.  And 
> > maybe I even can have a client that doesn't automatically report my whole 
> > social network to an easily subpoenaed server.
> > 
> > 
> > MAgnus
> > 
> > _______________________________________________
> > chat mailing list
> > chat at freenetproject.org
> > Archived: http://news.gmane.org/gmane.network.freenet.general
> > Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/chat
> > Or mailto:chat-request at freenetproject.org?subject=unsubscribe
> > 
> 
> -- 
> Matthew J Toseland - toad at amphibian.dyndns.org
> Freenet Project Official Codemonkey - http://freenetproject.org/
> ICTHUS - Nothing is impossible. Our Boss says so.



> _______________________________________________
> chat mailing list
> chat at freenetproject.org
> Archived: http://news.gmane.org/gmane.network.freenet.general
> Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/chat
> Or mailto:chat-request at freenetproject.org?subject=unsubscribe
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://emu.freenetproject.org/pipermail/chat/attachments/20060715/ae2e9549/attachment.pgp