After all, Skype has kept its crown as the standard video and audio conversation method across the internet-even in the face of brutal competition from Apple and Face Time.Īnd today, the software comes with an in-built recorder. There are thousands of reasons for recording a call, but for the most part, you want to remember specific details of a conversation, save a copy for future reference, or just to keep memories. So it wasn't internal conspiracy, just a good find by some NSA dude.Ever felt like you want to record a Skype video call? Orrrr.getting crazy now.it's a bug, but then it was discovered long ago by smart people and has been exploited. As 2013 passed, I thought back on that and laughed. My clock skew causes me to forget how many years ago that was, but I'm gonna say somewhere 2005-2008. I'd have something to say on the next HN post of "What makes a Senior Software Engineer", because a junior engineer would not be this smart.Īs an aside, long before the NSA reveals of 2013 there had been reports of back doors in skype. Totally right, that would be smart and awesome. Yes, if I were a 1337 haxxor and I wanted to disguise a commit to, say, Linux for my backdoor I would disguise it as a mistake. I once randomly discovered a hole in a web app where data was being leaked from an ajax call without logging in. someone.did that intentionally!" Then people think they're smarter than everyone else, using words like sheeple and such. I tire of the logic such as "well.what IF. The point is that some application that has control over very sensitive data includes a possibility (to avoid the word "backdoor") to access that data without user-confirmation and alarms, which are otherwise built into the application on a design level.Īlright, I'm burnt out and I don't want to think about work for a few mins, so:
Skype for mac 10 code#
Yes, it has been game over all the time: People execute arbitrary code on their machines by installing free programs they downloaded from somewhere. > Also, if somebody has the ability to run arbitrary code on your machine, I would think that it's game over at that point. Second, from the advisory linked from the article: > I wasn't able to see any working example, nor any responsible disclosure which seems bad.įirst, those two statements kind of contradict each other. How else would you call the possibility to sidestep access controls by setting a specific string as identifier?
> Calling this a backdoor is an extreme measure. And on a more "political" aspect: MS needed to promote its cloud infrastructure (Azure), lower its physical resources fingerprint (get rid of Skype datacenters), and unify its technical stack (Linux/C++ now Windows/C#) the african market, where a lot of very old phones are still in circulation, no "apps" are possible. So for a long time now (before MS) super-nodes are just backed by Skype-hosted servers in data-centers. This is a vicious cycle in which the network cannot get back up. In case the network falls down (which happened some years ago), then the super-nodes are no longer available, and get instantly DoS when coming back up due to every other node trying to get back.
Skype for mac 10 windows#
Fun fact: only windows client users were possible super-nodes). Super-nodes used to be regular end users (with some simple algorithm to elect as supernode users with high up-time, high throughput. This directly means that all these communication are transiting through a third party, and not peer to peer. Skype resorts to a number of hole punching techniques, but really only uses STUN/ICE, effectively using super-nodes as relay for sessions. Real peer to peer on internet is not really possible, since most end users are behind NAT. Both its premises (Skype was peer to peer before MS) and conclusion (MS made it a client-server system because Evil). While this simple reasoning is appealing, I have to disagree.
0 kommentar(er)
