The Tech Herald

Ignored Skype flaw enables hackers to steal sensitive user details

by Steven Mostyn - Oct 25 2011, 14:24

Image: Skype.

What’s not to like about Skype? It spans the world, it enables us to chat instantly with friends and family, it supports video communication, and it’s completely free. What’s not to like?

Well, how about the potential for having your computer’s security compromised because Skype can allow nefarious online criminals to access your identity, physical movements and personal documents?

That’s according to a paper published by a research team from New York University’s Polytechnic Institute, which claims hackers can take a Skype user’s IP address and use it to track activity through P2P services such as BitTorrent—where community users regularly share their personal details.

“These findings have real security implications for the hundreds of millions of people around the world who use VoIP or P2P file-sharing services,” commented Keith Ross of the Polytechnic Institute.

“A hacker anywhere in the world could easily track the whereabouts and file-sharing habits of a Skype user—from private citizens to celebrities and politicians—and use the information for purposes of stalking, blackmail or fraud,” he added.

Although an actual call connection is required to enable the attack, the researchers say hackers will be able to sidestep not being on a user’s contact list by initiating a call, blocking information packets, tracking the victim’s IP address, and ending the call without it even ringing through on the targeted computer.

Skype has apparently been informed of the security loophole (a year ago!), but is yet to act. The researchers say the VoIP service should be able to close the hole quickly and easily by simply tweaking the existing Skype protocol so that it withholds a user’s IP address unless an incoming call is physically accepted.

Skype, which was recently acquired by Microsoft, has not offered an official comment regarding the matter.

Around the Web

Comment on this Story

comments powered by Disqus

From Autosaur.com

Shelby GT350 Mustang Pictures

We have added a bunch of pictures of the all-new Shelby GT350 Mustang from Ford. The ne...

All-new Shelby GT350 Mustang

Ford have revealed details of the new Shelby GT350 Mustang. First introduced in 1965 the new...

Best Cars To Buy In 2015

Leading vehicle research company Kelley Blue Book has released its list of the best cars to ...

A.C. Milan Take On Audi R8

Five A.C. Milan stars take on an Audi R8 in a game of street soccer in a new ad for Toyo Tir...

Jaguar 2016 F-TYPE R Coupe All-Wheel-Drive

Jaguar has unveiled the 2016 F-TYPE R Coupe, the first to feature all-wheel-drive. The 2016 ...