[liberationtech] NYT report on Obama admin's wiretap plans

[Jacob Appelbaum]

On 09/27/2010 02:19 PM, Jack Lloyd wrote:

>> Unless that is there is a bug in the Skype client software, which would
>> surely be quickly patched..
> 
> Because software vendors always patch bugs as soon as they are found
> and exploited? The recently announced Linux vulnerability
> (CVE-2010-3301) was supposedly known in some circles and being
> actively exploited for almost two years before it was fixed.
> 
> -Jack

Skype cannot easily patch their network. They do not own every computer
in the network - they even have hardware devices that cannot be (easily
or ever) upgraded such as telephone units, firmware for motherboards, etc.

There are many more bugs like CVE-2010-3301 in circulation.

All the best,
Jake