Kamis, 03 Mei 2012

Skype has known about a security hole that lets users be tracked to their city for a year, claim experts

Skype has known about a security hole that lets users be tracked to their city for a year, claim experts

By Eddie Wrenn

PUBLISHED: 12:16 EST, 3 May 2012 | UPDATED: 12:16 EST, 3 May 2012

Skype has been accused of allowing a privacy vulnerability which potentially let people know the location of a caller to stay in their software for more than a year.

Skype learned more than a year ago about a privacy vulnerability that would allow someone to identify the IP address and the geographic location of a user, but left it unfixed, according to researchers who say they notified the company in 2010.

Researcher Stevens Le Blond, at the Max Planck Institute for Software Systems, said he and other researchers at the Polytechnic Institute of New York University told Skype in November 2010 about the issue.

Skype issues: Researchers say they were able to track the city-level location of 10,000 Skype users for two weeks.

Skype issues: Researchers say they were able to track the city-level location of 10,000 Skype users for two weeks.

They had been able to track the city-level location of 10,000 Skype users for two weeks.

Despite the researchers publishing their work publicly in October 2011 - it still remains unfixed.

Skype has become a very popular peer-to-peer phone system, but privacy issues will concern users

Skype has become a very popular peer-to-peer phone system, but privacy issues will concern users

The researchers only discovered the vulnerability was still open when a programmer posted a script online showing how Skype could be exploited.

Skype said it was 'investigating reports'.

But Le Blond criticised the statement, telling the CIO Journal: 'By calling it a "new tool" it means they don’t have to respond as urgently. It makes it seem like they just found out.'

The team said they could disguise calls to Skype users, prevent pop-up notifications and call histories.

The victims did not know they had been called and did not even need to answer the phone.

Keith Ross, one of the researchers who notified Skype in 2010, told the CIO Journal that Skype may be struggling to fix the problem because it may be 'deeply embedded in the code' and need 'heavy restructuring' to fix.


Here's what other readers have said. Why not add your thoughts, or debate this issue live on our message boards.

The comments below have been moderated in advance.

  • Newest
  • Oldest
  • Best rated
  • Worst rated

Just use A VPN

Report abuse

I don't see the problem, most people I call know my location. People I call on my mandline also know my location due to the dailing code. However niether of these give out my full postal address, so this is a none story.

Report abuse

The views expressed in the contents above are those of our users and do not necessarily reflect the views of MailOnline.

Diposting oleh di

Tidak ada komentar:

Posting Komentar

Langganan: Posting Komentar (Atom)