iTnews

Ruskies say spooks can intercept Skype

By Juha Saarinen on Mar 19, 2013 7:30AM
Ruskies say spooks can intercept Skype

Claims traffic can be routed through central server.

Unverified reports in Russian media claim that conversations over Skype can be eavesdropped by intelligence agencies which can also determine the location of users.

First reported in the Russian-language Vedomosti newspaper last week, the Federal Security Service (FSB) has had the ability to intercept Skype calls for "a couple of years" and often do so without a court warrant.

As a result, some Russian companies are banning staff from using Skype out of concern that their communications are secretly listened to.

Since Skype voice and video calls as well as instant messages are routed directly between users in a peer-to-peer fashion without a central server, and encoded locally according to the 256-bit Advanced Encryption Standard developed by the United States government, it's been assumed that eavesdropping on communications would be impossible in practice.

However, Vedomosti quotes the executive director of payments provider Peak Systems, Maxim Emm, saying that after Microsoft's purchase of Skype, it is now possible to eavesdrop on users easiliy.

According to Emm, call set ups between any user accounts can now be directed to go through a central server that generates the encryption keys that were previously created on users' devices. This allows calls and other communications to be decrypted and intercepted, Emm said.

Emm claims that Microsoft has provided this interception ability to other security services around to the world, to be used for legitimate wiretapping of communications.

Earlier this month, a US computer science graduate student, Jeffrey Knockel, worked out how Skype censors messages between users of its software in China.

Skype has been intercepting and blocking thousands of terms the Chinese regime considers politically sensitive such as Tiananmen, Amnesty International and Ferrari.

Speaking to Bloomberg, Knockel said that as part of a study project he discovered that each time users of Skype's Chinese software go online, an updated blacklist of terms is downloaded.

When an offending term is matched, Knockel said a copy of the message is sent to server operated by Skype's partner TOM in China, along with the account user name and date and time stamps, plus receipt notifications.

However, Knockel said he doesn't know if the information is shared with the Chinese government.

iTnews contacted Microsoft's communications agency and Skype for comment on the matter, and will update the story if any is received.

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © iTnews.com.au . All rights reserved.
Tags:
encryptioninterceptionmitmsecurityskypevoip

Partner Content

Top 5 Benefits of Managed IT Services
Promoted Content Top 5 Benefits of Managed IT Services
Don't miss Australia’s premiere IoT Conference on 9th June
Promoted Content Don't miss Australia’s premiere IoT Conference on 9th June
Matt Tett to lead essential primer session on security by design
Partner Content Matt Tett to lead essential primer session on security by design
Operationalising net zero to be centre stage at IoT Impact conference
Partner Content Operationalising net zero to be centre stage at IoT Impact conference

Sponsored Whitepapers

Planning before the breach: You can’t protect what you can’t see
Planning before the breach: You can’t protect what you can’t see
Beyond FTP: Securing and Managing File Transfers
Beyond FTP: Securing and Managing File Transfers
NextGen Security Operations: A Roadmap for the Future
NextGen Security Operations: A Roadmap for the Future
Video: Watch Juniper talk about its Aston Martin partnership
Video: Watch Juniper talk about its Aston Martin partnership
Don’t pay the ransom: A three-step guide to ransomware protection
Don’t pay the ransom: A three-step guide to ransomware protection

Events

  • iTnews Benchmark Awards 2022 - Finalist Showcase
  • IoT Impact Conference
  • Cyber Security for Government Summit
By Juha Saarinen
Mar 19 2013
7:30AM
0 Comments

Related Articles

  • Geolocation threats rise following demonstration of router hacking that can pinpoint a person's home
  • Videoconferencing apps can access muted mics
  • TLS upgrade broke Azure DevOps for some users
  • Online safety committee tags algorithms, encryption as perilous
Share on Twitter Share on Facebook Share on LinkedIn Share on Whatsapp Email A Friend

Most Read Articles

NBN Co sizes up six-figure customer exodus a year to fixed wireless

NBN Co sizes up six-figure customer exodus a year to fixed wireless

NBN Co to cut 160 applications under $200m IT simplification

NBN Co to cut 160 applications under $200m IT simplification

What to expect from the incoming Labor government

What to expect from the incoming Labor government

NBN Co's 250Mbps and gigabit growth is finally clear

NBN Co's 250Mbps and gigabit growth is finally clear

Digital Nation

COVER STORY: Data and IoT set digital agriculture on a sustainable future
COVER STORY: Data and IoT set digital agriculture on a sustainable future
Why do DeFi and DAOs matter to business?
Why do DeFi and DAOs matter to business?
CTO Juergen Mueller offers a glimpse into SAP's metaverse play
CTO Juergen Mueller offers a glimpse into SAP's metaverse play
Lendlease launches its own metaverse in Milan
Lendlease launches its own metaverse in Milan
COVER STORY: A Year in the Metaverse
COVER STORY: A Year in the Metaverse
All rights reserved. This material may not be published, broadcast, rewritten or redistributed in any form without prior authorisation.
Your use of this website constitutes acceptance of nextmedia's Privacy Policy and Terms & Conditions.