[liberationtech] skype

[Anthony Papillion]

On 03/22/2013 03:25 PM, Joseph Lorenzo Hall wrote:
> 
> 
> On 3/22/13 3:21 PM, Andreas Bader wrote:
>>
>> Is this the same "Script Kiddie Hack" that was available for IQC a few
>> years ago? Don't you think that will solve itself?
> 
> Not familiar with that hack...
> 
> This one essentially omits a few steps of the Skype client handshake and
> the IP address is sent to the attacker without any notice to the target
> Skype user. This is one reason I only keep skype on when I'm using it
> and then make sure VPN before launching it.

One thing to note is that this 'hack' gives the *last* IP that the user
logged in from (which, of course, might be the current IP if the user is
currently logged in). The user doesn't have to be logged in for it to
work. I just resolved mine and it gave me my IP address but I haven't
been logged on in two days.

Anthony