January 07, 2005
Skype Security
Looks like Skype has some more security issues. Andy had an "eavesdropping" security issue when he tried calling another Skype user.
Essentially when he dialed this other Skype user, this user was already in a Skype conference call, so Andy started to leave a message. Apparently, the Skype conference participants could hear Andy! Not only that, but Andy could also hear the Skype participants that were conferencing. This is a scary thought to think that someone leaving a Skype voice message could eavesdrop on a ongoing Skype call.
Check out his blog entry here: VoIP Watch: SAM - Skype® Answering Machine --
Posted by tkeating at January 7, 2005 01:56 PM | TrackBack (3)
http://blog.tmcnet.com/cgi-bin/mt-tb.cgi/593
» It's not Skype.... from Unbound Spiral
I heard a rumor yesterday about a post by Andy Abramson on Skype and SAM. Frankly I believe he should print a retraction. I'll use the comments posted on Jeff Pulver's blog to add clarity. Jeff also passed on a......[read more]
Tracked: January 9, 2005 12:59 PM
» Skype Security Issue Part2 from VoIP Blog - VoIP News, Gadgets
A couple days ago I quoted Andy's blog where he discussed a Skype security issue whereby callers in a Skype conference could hear an incoming caller leaving a voice message vis Skype new SAM (Skype Answering Machine) feature. Well, that......[read more]
Tracked: January 9, 2005 03:23 PM
» Andy, Jeff and Tom are Wrong Yet The Earth Still Spins? from Rich Tehrani - VoIP Blog
If you haven't been watching, you missed some some serious Skype controversy in the blogosphere. Some of the most frequent and best-known VoIP bloggers Andy Abramson, Jeff Pulver and Tom Keating are wrong according to this post from Stuart Henshall......[read more]
Tracked: January 9, 2005 08:53 PM
Maybe it should be called the SHIM SHAM Skype Hacking Machine. Not only does it record your calls, but you get a high level of service. ))
Posted by: Rick at January 7, 2005 02:47 PMThis is not a security flaw -- this is a feature : - )
It is just as if you were sitting in my office and an incoming POTS call is picked up by my 20 year old answering machine. If the volume is up everyone in the secure space (my office) can hear the recording. Solution: Mute the answering machine.
Remember how folks used this feature to screen calls -- "Hi it's Sally, if you are there please pick up". We just need to learn how to use these new tools. When you have a meeting you mute your answering machine -- that should be the default.
/PBM
Muting the answering machine is not enough because the caller is able to monitor the conversation. One should have such a bugging system.
Posted by: Aswath at January 8, 2005 12:02 AM
