EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

05.16.13

Microsoft Skype Messaging Surveillance Not the Main Issue, Audio Recording (Bugging) and Computer Hijacking Are

Posted in GNU/Linux, Microsoft, Windows at 12:03 pm by Dr. Roy Schestowitz

Nokia phone

Summary: Debates about the dangers of Skype focus on one of the least dangerous aspects of Skype

THE PROBLEM with Skype is not quite what The H focuses on. Microsoft claims to be scanning people’s conversations to mitigate the threat of phishing scams and such, but this doesn’t quite compute unless they only ever test for redirections in HEAD. To say that Skype is tracking people’s conversations would not be shocking because even years ago (before Skype was taken up by Microsoft and the NSA) China was given access to text conversations for censorship purposes (similar to security purposes in the practical sense). This is well documented in news sites, especially in Western news sites that like to berate China over practices that the West too harbours, but always under plausible denial clauses.

For those who have not seen the widely-syndicated and discussed report from Heise (or The H), in English the summary says: “A Microsoft server accesses URLs sent in Skype chat messages, even if they are HTTPS URLs and contain account information. A reader of Heise publications notified Heise Security (link to German website, Google translation). They replicated the observation by sending links via Skype, including one to a private file storage account, and found that these URLs are shortly after accessed from a Microsoft IP address. When confronted, Microsoft claimed that this is part of an effort to detect and filter spam and phishing URLs.”

“The H and heise Security believe that, having consented to Microsoft using all data transmitted over the service pretty much however it likes, all Skype users should assume that this will actually happen and that the company is not going to reveal what exactly it gets up to with this data.”
      –The H
As the article in The H puts it: “Anyone who uses Skype has consented to the company reading everything they write. The H’s associates in Germany at heise Security have now discovered that the Microsoft subsidiary does in fact make use of this privilege in practice. Shortly after sending HTTPS URLs over the instant messaging service, those URLs receive an unannounced visit from Microsoft HQ in Redmond.

“A reader informed heise Security that he had observed some unusual network traffic following a Skype instant messaging conversation. The server indicated a potential replay attack. It turned out that an IP address which traced back to Microsoft had accessed the HTTPS URLs previously transmitted over Skype. Heise Security then reproduced the events by sending two test HTTPS URLs, one containing login information and one pointing to a private cloud-based file-sharing service.”

Microsoft’s excuses didn’t pass muster (the security excuse for surveillance, where all they can really test for is a redirection). “In summary,” says the author, “The H and heise Security believe that, having consented to Microsoft using all data transmitted over the service pretty much however it likes, all Skype users should assume that this will actually happen and that the company is not going to reveal what exactly it gets up to with this data.”

And from the comments we learn it’s worse than The H originally put it: “We tested it at mooncascade.com. I can confirm there is correlation between URL-s in Skype chats and web server access logs with traces from Redmond. There are both https and http accesses.”

Another commenter says:

So much about the “AES encryption” Skype promisses:

> All Skype-to-Skype voice, video, and instant message conversations
> are encrypted. This protects you from potential eavesdropping by
> malicious users.
>
> (https://support.skype.com/en/faq/FA31/does-skype-use-encryption)

Aparently, this falls into the same category as “McDonalds food is
healty and tastes good”.

This whole debate, unfortunately, misses a key point; not just text conversations are being tracked but voice ones (relayed through US infrastructure) — the bread and butter of Skype — are also being tracked and Skype as a binary ensures not only that Windows is hijackable, as we showed before, but that all platforms are rendered hijackable when Skype is running in the background (Skype has no intention of addressing these issues). The debate should be altered to take account of these much greater threats. By the way, on Windows it doesn’t even take Skype to hijack a computer; Microsoft has just admitted that exploits in the wild exist that help hijack Windows through a built-in program and there is also software that lets people’s Facebook accounts get hijacked through Windows, including on Vista 8 (the operating system which hardly sells, leading Microsoft to lies and inexcusable disinformation).

“A much rarer event, however, is one of Redmond’s own unloading publicly on the faults of not only Windows, but Microsoft’s company culture.”
      –Gizmodo
The Free Software Foundation has long been campaigning against Skype, even before Microsoft took over. GNU/Linux with SKype binaries is just about as compromisable as other platforms. The weakest link counts. It is worth noting that even a Windows developer admits that Windows is inferior to Linux, stirring up further debate. As Gizmodo put it: “Right now, somewhere on the internet, there is a flame war occurring between devotees of Linux and Windows. It’s just the nature of passionate software evangelism. A much rarer event, however, is one of Redmond’s own unloading publicly on the faults of not only Windows, but Microsoft’s company culture.”

At Microsoft, backdoors are not a bug; sometimes they are a feature. Since nobody among the users can inspect the code or thoroughly interpret the binaries, it’s hard to remove the backdoors, let alone prove their existence.

“You assist an evil system most effectively by obeying its orders and decrees. An evil system never deserves such allegiance. Allegiance to it means partaking of the evil. A good person will resist an evil system with his or her whole soul.”Mahatma Gandhi

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email
  • Slashdot

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. Links 21/10/2020: Alpine 3.12.1, Tor Browser 10.0.2

    Links for the day



  2. [Meme] US Department of Justice Should Have Taken on Microsoft Again, Not Google

    When lobbying, connections and political sway determine the actions of the American government it's hardly surprising that Bill Gates gets the Trump administration to fight for him (to make him even richer)



  3. [Meme] Banning Words, Gaslighting Volunteers

    What happens when institutions are themselves in violation of a CoC (institutional violation) and massive corporations that fund such institutional violations are defending demonisation of the individual (squashing ‘uncomfortable’ voices, even volunteers’)



  4. IRC Proceedings: Tuesday, October 20, 2020

    IRC logs for Tuesday, October 20, 2020



  5. Links 21/10/2020: $8000 GNU/Linux Desktop, Tails 4.12, Open Infrastructure Foundation and Firefox Release

    Links for the day



  6. Never Feed the Internet Trolls, No Matter How Tempting It Becomes

    The tactics for removing critics of abuse (by framing them as "abusive") have evolved a lot in recent years; the best course of action is to never entertain provocateurs in any way whatsoever (just ignore them, give them no attention which they crave and feed on)



  7. Bill Gates: “I'm Not a Lawyer” (He Dropped Out of College, Where He Studied Law Before and After Breaking the Law Chronically)

    How Microsoft blackmailed other companies into supporting nothing but Microsoft and Windows; Bill Gates repeatedly lied to the interrogators about it, then said "I'm not a lawyer" (IANAL) even though he went to college to become one, just like his father who died last month



  8. Microsoft Has Not Changed Since Being Investigated (and Prosecuted) for Crimes at a Federal Level

    The media keeps telling us a bunch of worthless junk about Gates "saving the world" and Microsoft becoming a "nice" and "gentle" (or "soft") company, but nothing could be further from the truth



  9. Stick a Fork in the Open Source Initiative (OSI). OSI is Dead. Microsoft Bought OSI.

    OSI leadership proudly showing early signs of 'prognosis negative'; the OSI can never and will never recover from this; Microsoft killed it



  10. Links 20/10/2020: OpenZFS 2.0 RC4 and Trisquel GNU/Linux 9.0

    Links for the day



  11. People With God Complex Must Never be Allowed in Positions of Power

    The attack on Linus Torvalds — an attack which at his own expense/peril he fails to recognise/acknowledge — seeks to put both projects that he founded right in Microsoft’s palm



  12. IRC Proceedings: Monday, October 19, 2020

    IRC logs for Monday, October 19, 2020



  13. Corporate Media: GNU/Linux Can Only Succeed If/When Microsoft Dominates Everything Inside It

    The corporate takeover (or handover) of GNU/Linux would not have been possible without complicity of corruptible (bribed) media



  14. Bill Gates Explains How Microsoft and Apple Leverage Software Patents in Their Cross-Licensing Deals (to Perpetuate Duopoly/Shared Monopoly)

    A look back at Apple's and Microsoft's use or misuse of bogus software patents in bargaining (in effect excluding those who have not amassed tens of thousands of patents)



  15. Standards and Choices

    GNU/Linux is a very standards-based platform; having lots of choices (e.g. distros to choose from) isn’t the principal problem — or nowhere near the extent sabotage and illegal tactics by Microsoft have been



  16. IBM's “Emb(RACE)” Campaign is an Insult to History and Historians

    IBM wishes to be seen as some heroic saviour and warrior for black girls; this requires serious if not torturous revisionism to be believed



  17. There Are Too Many Types of Cars...

    "Choice is malicious," say the antagonists



  18. Reversal of Narratives by Internet Trolls (Spinning Reaction to Their Trolling as 'Abuse')

    Organisations that engage in demonisation of people (typically those who expose the abuses of such organisations) somehow evade the standards of Codes of Conduct, as if Codes of Conduct are covertly designed not to protect individuals but to empower those who already have all the powers (or front for powerful people/corporations)



  19. Ongoing (Albeit Secret) Campaign of Patent Extortion Against GNU/Linux Distributions Using Software Patents, Even Expired Ones in Europe

    GNU/Linux distros attacked by software patents, even in Europe where no such patents are supposed to exist (or have any legal bearing)



  20. Links 19/10/2020: Linux 5.9-ck1/MuQSS, Linux Kodachi 7.3

    Links for the day



  21. Java's James Gosling is Wrong. Free Software Advocates Never Suggested or Insinuated That Money-Making Was Ethically Wrong.

    The honorable James Gosling mischaracterises the stance of Free software advocacy, portraying it like it is an issue of money rather than respect for users



  22. Maybe This is What Codes of Conduct Were Made for? Or to Prevent? (Updated)

    When people bemoan the abuse they receive from a so-called 'anti-harassment' team (covering up corporate corruption in a project by ousting people) this is the kind of thing they receive from colleagues or former colleagues



  23. Media Contradicts Itself, Redefines Proprietary Software as 'Open'... for Microsoft

    Proprietary GitHub is being spun as Microsoft going "open" (nothing could be further from the truth) in another EEE-type move with diffusion and confusion



  24. A Critic's Free Software Dictionary by figosdev

    Sarcastic take on often-spoken words in the domain of technology



  25. IRC Proceedings: Sunday, October 18, 2020

    IRC logs for Sunday, October 18, 2020



  26. Links 19/10/2020: OpenBSD 6.8, RapidDisk 7.0.0, Tails 4.11 Reviewed

    Links for the day



  27. The Different Types of Spammy 'Articles' and 'Reviews' Which Have Killed 'Professional Journalism' (Nowadays Mostly SPAM)

    The media has become so rogue that a lot of it is merely an extension of the marketing/PR industry; unless this is corrected, online publishers will fail to earn or maintain any degree of trust



  28. When the Software -- and by Extension Hardware and Network -- Controls the User...

    A distraction-free workflow is more likely to be attained using Free software than without it; in a world with information overload and 'surveillance capitalism' people need to carefully rethink what they do (or have done to them) digitally



  29. What the Linux Foundation Teaches People About GNU/Linux in LinuxFoundationX (edX) LFS101x “Introduction to Linux” [sic]

    Some annotated screenshots of preliminary sections of LFS101x, a 'course' designed to indoctrinate people for the Linux Foundation and the project is borrows its name from (but whose trademark it does not control)



  30. Shut Up and Learn to Maintain an Application Suite

    "Try and maintain a complex piece of software like a browser or an office suite, and then you'll understand."


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts