Re: Skype cracked

* Matthew Toseland <toad-EI5O+8PHWbJeeLb3ft/[email protected]> [2006-07-14 23:20:06]:

> Is there any evidence of reasonable crypto in skype? I have heard that
> it is encrypted, but no other VOIP is...?
> 

I've found some interresting slides about it :
http://actes.sstic.org/SSTIC06/Castle_in_the_Skype/SSTIC06-Desclaux-Castle_in_the_Skype.pdf
http://actes.sstic.org/SSTIC06/Castle_in_the_Skype/SSTIC06-article-Desclaux-Castle_in_the_Skype.pdf

they are less than a month old ... in french, sorry.

To sum up, it shows that skype is using many tricks to harden the
reverse-engeenering process... I don't like security by obscurity :p

NextGen$

> On Sat, Jul 15, 2006 at 12:14:43AM +0200, Magnus Eriksson wrote:
> > 
> > I thought this might be interesting:
> > 
> > 
> > Chinese Company: Skype Protocol Cracked
> > http://www.cio.com/blog_view.html?CID=22974
> > 
> >  "The 10-person Chinese company, which has received venture capital 
> > funding, is planning to release in two weeks three software components 
> > based on the Skype protocol that would allow developers to create 
> > compatible applications ..."
> > 
> >  "By cracking the Skype protocol, the company claims it can also block 
> > Skype voice traffic ..."
> > 
> > 
> > Original source:
> > 
> > Skype Protocol Has Been Cracked
> > http://www.voipwiki.com/blog/?p=16
> > 
> > 
> > So..
> > 
> >  "Software components that would allow developers to create compatible 
> > applications"
> > 
> > Fantastic!  So we have great stego for Freenet.  And it might even be 
> > possible to bounce traffic off Skype nodes (or, Freenet nodes using that 
> > "component").
> > 
> > But...
> > 
> >  "the company claims it can also block Skype voice traffic"
> > 
> > We're screwed.  :-)
> > 
> > 
> >   But I suppose it might be useful.  Another option, if nothing else.  And 
> > maybe I even can have a client that doesn't automatically report my whole 
> > social network to an easily subpoenaed server.
> > 
> > 
> > MAgnus
> > 
> > _______________________________________________
> > chat mailing list
> > [email protected]
> > Archived: http://news.gmane.org/gmane.network.freenet.general
> > Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/chat
> > Or mailto:[email protected]?subject=unsubscribe
> > 
> 
> -- 
> Matthew J Toseland - toad-EI5O+8PHWbJeeLb3ft/[email protected]
> Freenet Project Official Codemonkey - http://freenetproject.org/
> ICTHUS - Nothing is impossible. Our Boss says so.



> _______________________________________________
> chat mailing list
> [email protected]
> Archived: http://news.gmane.org/gmane.network.freenet.general
> Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/chat
> Or mailto:[email protected]?subject=unsubscribe

_______________________________________________
chat mailing list
[email protected]
Archived: http://news.gmane.org/gmane.network.freenet.general
Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/chat
Or mailto:[email protected]?subject=unsubscribe

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEuP/6U/Z/dHFfxtcRAmJSAJ95u5cLduIGM1DaZ7COKhGVCyFDggCghrI/
1T6QkQbmlzB1usaboeLgr1E=
=pKh1
-----END PGP SIGNATURE-----