Abandon Skype all ye who enter here !

Discussions about everything else
Post Reply
User avatar
Dr.Flay
Godlike
Posts: 3347
Joined: Thu Aug 04, 2011 9:26 pm
Personal rank: Chaos Evangelist
Location: Kernow, UK
Contact:

Abandon Skype all ye who enter here !

Post by Dr.Flay »

For those who are unaware of the changes since Micro$oft bought Skype, I thought I would bring your attention to this, and urge you to think twice (again) about using it.
Use a secure multi-client alternative like Trillian, and it will enable encryption to another Skype compatible program.
https://www.trillian.im/policies/security/
The H's associates at heise Security made a discovery this week that caused somewhat of a controversy when they exposed what seemed to be Microsoft probing URLs that were posted in Skype chats. As the week went on, further research into this behaviour unearthed some more facts and raised further questions.
http://www.h-online.com/security/news/i ... 65767.html
User avatar
UTPe
Masterful
Posts: 584
Joined: Sun Jul 12, 2009 7:10 pm
Personal rank: Dude
Location: Trieste, Italy
Contact:

Re: Abandon Skype all ye who enter here !

Post by UTPe »

for those who love Skype and want to keep on using it: http://www.oldversion.com/windows/skype-3-8-0-188
Personal map database: http://www.ut99maps.net

"These are the days that we will return to one day in the future only in memories." (The Midnight)
JackGriffin
Godlike
Posts: 3774
Joined: Fri Jan 14, 2011 1:53 pm
Personal rank: -Retired-

Re: Abandon Skype all ye who enter here !

Post by JackGriffin »

Remember: there is NO free lunch. People so often forget that because they feel entitled to anything they want and it better be free. No business does anything unless there is a profit in it somewhere. I can't see why anyone would find MS's actions surprising in the least. You expected different? I wouldn't be surprised if they recorded everything, parsing it for keywords, then targeting advertising from those conversations. Voice recognition is very advanced, and the gold mine of data is constantly streaming.
So long, and thanks for all the fish
User avatar
Feralidragon
Godlike
Posts: 5493
Joined: Wed Feb 27, 2008 6:24 pm
Personal rank: Work In Progress
Location: Liandri

Re: Abandon Skype all ye who enter here !

Post by Feralidragon »

Kinda makes you think when Microsoft just made some videos some time ago bashing Google Chrome for doing exactly stuff like that.
I stopped using MSN a long time ago, and I have horror to Skype. I prefer to use Gtalk, I know they probably use it for advertising, but I don't really care and Google was always blatant about it.
User avatar
papercoffee
Godlike
Posts: 10448
Joined: Wed Jul 15, 2009 11:36 am
Personal rank: coffee addicted !!!
Location: Cologne, the city with the big cathedral.
Contact:

Re: Abandon Skype all ye who enter here !

Post by papercoffee »

Jabber + SSL/TLS ...nothing more to say.
User avatar
Dr.Flay
Godlike
Posts: 3347
Joined: Thu Aug 04, 2011 9:26 pm
Personal rank: Chaos Evangelist
Location: Kernow, UK
Contact:

Re: Abandon Skype all ye who enter here !

Post by Dr.Flay »

You won't see 1 single jot of surprise from me. As an Amiga user, it is what I expect from the PC world :wth:
If anyone wants to listen to the subject being discussed by 2 security experts, check show No.404
https://www.grc.com/securitynow.htm

As I have said before.
8) Use the network, not the client.
I don't think using an older Skype will help :nonono:

Trillian can also enable various encryption routines (including Blowfish) to another compatible client over the various networks https://wikipedia.org/wiki/Blowfish_(cipher)

Exerpt from Trillians security policy https://www.trillian.im/policies/security/
2.1. On The Desktop

When you start Trillian on the desktop, a connection is made from your device to Cerulean's servers and authenticated with a unique Trillian username (your "Trillian Username") and password (your "Trillian Password") using our internally-developed instant messaging and presence protocol ("IMPP"). All IMPP connections are always protected with the industry standard Transport Layer Security Protocol ("TLS").

IMPP serves two purposes:
1) To expose a complete instant messaging environment including text IM, file transfers, voice and video, and visibility lists. For example, two people with Trillian can communicate using IMPP without the need for any additional third-party accounts.

2) To act as the synchronization engine between devices in the event that multiple devices are connected at the same time. For example, Trillian's continuous client feature relies on communication between your desktop and phone to keep chats in sync; this communication is done using IMPP.

Connections to third-party instant messaging service providers like Google Talk are made directly from your device to the provider you choose to connect to. Many providers now offer the option to use TLS when communicating with them, and Trillian uses TLS whenever possible.
AOL have data-mined all their traffic for many years. They were one of the first to do it.
They provide you with a tunnelled AOL version of the internet, via their own software frames for other peoples products.
eg. AOL browser and media-player are IE and MS Media Player behind an AOL mask.
They even funnel the users, by providing the AOL keywords all over their adverts.

When Google released Chrome, I immediately realised they would be able to do exactly the same as AOL, and also provide you with a carefully monitored google version of the net.
I treat all data going via Google (services and devices), AOL and MS, (whether it be web, email or IM) as regularly intercepted and scanned.

All Google, AOL and MS software have minimal security options (compared to what I am used to).
All 3 have a history of spamming the user with ads, and harvesting as much data as they can get away with.
Recently users of the real MSN client will have swapped 1 ad-infested IM program for another less functional program called Skype.
:idea: Gmail and Gchat support OTR. If you can find it, enable it.

To me as a user of Pidgin (Linux) and Trillian (Windows & web), I have had a consistent IM experience, with more security and functionality.
Recent panics and changes, have caused me only amusement :mrgreen:
eg. anyone who did not rush to change their MSN ID into a Skype ID, will have noticed that MSN is still working, and will continue to do so.

:idea: anyone wishing to make their current IM client even more secure, should check "Off The Record" and see if there is a plugin for you.
http://www.cypherpunks.ca/otr/
https://ssd.eff.org/tech/im
Post Reply