so #
Posted Friday 3rd October 2008 14:05 GMT
we can expect similar but shadier things already occur in Germany (they've illudid to this before) and I would be shocked if the states and UK weren't trying to get in on the game too.
Posted Friday 3rd October 2008 14:05 GMT
Kudos to all who have helped expose this!
Capitalism has no ethics: Skype would be doing the same in East Germany if it still existed, and they'd be doing the same in the UK if Hitler had won the war.
Also that link to the Skype blog is interesting. No reply to the comments, but at least they've let the comments stay.
Posted Friday 3rd October 2008 14:05 GMT
A filter designed to look for keywords was changed to intercept entire messages for surveillance purposes.
But that could never happen with Phorm of course.
Posted Friday 3rd October 2008 14:05 GMT
If you want to communicate securely, and always do the encryption yourself on your end, and have the recipient do the decryption themselves on their end. Never rely on the carrier - you'll never be able to verify their handling.
Posted Friday 3rd October 2008 14:05 GMT
we can expect similar but shadier things already occur in Germany (they've illudid to this before) and I would be shocked if the states and UK weren't trying to get in on the game too.
Posted Friday 3rd October 2008 14:05 GMT
According to TFA, the client is sending an (extra) message to the logging server, so the conversation can still be end-to-end secure.
Trouble is, not even an open sourced alternative would help, if the provider of that binary has meddled with it, as appears to be the case here (Skype asked Tom to add filtering, Tom added logging while they were there).
Posted Friday 3rd October 2008 14:05 GMT
Who's to stop their system being altered without BT's knowledge (or more likely with BT fully complicit) to start logging all web use?
Not that I'm paranoid or owt.
Posted Friday 3rd October 2008 15:18 GMT
....but with 3 ends.
I always assumed the NSA could listen in on Skype.
There's no better way to to tap communications than to quietly seed the development of what will be popular VOIP software and tell everyone it's "end to end encrypted".
Black budgets, people.
Posted Friday 3rd October 2008 17:30 GMT
another thought - media seem to get handed China stories a bit like you use a piece of string to distract a cat.
"Hey, maybe I'll investigate government data silo plans and US Border controls"
"Hey reporter, yeah over here, check out this story about China"
"Bollocks to the data silo and no one can afford to travel anyway" reporter suckles at the teet of Chinese shocking behaviour. Hurumphs are delivered, pats on backs transmitted, everyone feels good again.
It is funny how these little distractions always turn up. It's like "hey guys don't pay attention to that giant arse f----ing machine you're sat on, instead pay attention to the guys over there with the funny hat and slitty eyes!"
Posted Monday 6th October 2008 09:37 GMT
And that dear AC is precisely why the UK Government were 6 weeks late replying to the EU enquiries, and why they assure all comers that Phorm is entirely legal and that the users should be pleased to have the opportunity to be "protected" by it.
Nothing to hide, nothing to fear. Move along please, nothing see.
Posted Monday 6th October 2008 09:37 GMT
....an hour after consuming a few hundred Skype logs, you are hungry again for more.
Posted Monday 6th October 2008 09:37 GMT
"
Skype "urgently addressed" the situation with TOM, which closed the security hole. Skype president Josh Silverman said: "We are currently addressing the wider issue of the uploading and storage of certain messages with TOM."
"
"We are sorry we have been eavesdropping so ineptly. We promise to eavesdrop more competently in the future"
Sign up, sign up for The Register's weekly IT security newsletter - click here