Re: [Full-Disclosure] Skype

From: VeNoMouS (venom_at_gen-x.co.nz)
Date: 08/19/04

  • Next message: Richard Johnson: "Re: [Full-Disclosure] iDEFENSE Security Advisory 08.18.04: Courier-IMAP Remote Format String Vulnerability"
    To: "404" <matthew@textbox.net>, <full-disclosure@lists.netsys.com>
    Date: Thu, 19 Aug 2004 14:31:11 +1200
    
    

    only the text, it does call both logins so you could steal a call , but you
    can not listen to a convo
    ----- Original Message -----
    From: "404" <matthew@textbox.net>
    To: <full-disclosure@lists.netsys.com>
    Sent: Thursday, August 19, 2004 1:57 PM
    Subject: Re: [Full-Disclosure] Skype

    > On Wed, 2004-08-18 at 19:49, VeNoMouS wrote:
    >> This really isnt really a flaw , but I noticed that if you have skype
    >> logged in on two boxes using the same account, the first account does
    >> not get disconnected and the instant messaging goes to both boxes, so
    >> if you were able to get the password to some ones skype account you
    >> can get one side of the converstation with out the real account
    >> knowing.
    >
    > Does this just work for the text or can you intercept the voice
    > transmissions as well?
    >
    > --
    > 404 <matthew@textbox.net>
    > Textbox Networks
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.netsys.com/full-disclosure-charter.html
    >

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html


  • Next message: Richard Johnson: "Re: [Full-Disclosure] iDEFENSE Security Advisory 08.18.04: Courier-IMAP Remote Format String Vulnerability"

    Relevant Pages

    • Re: [Full-Disclosure] Skype
      ... > This really isnt really a flaw, but I noticed that if you have skype ... > logged in on two boxes using the same account, ...
      (Full-Disclosure)
    • Re: Is this phishing?
      ... tried to set up a billing account with Skype (I thought it was free ... account so they can get the details somehow. ... the credit card statement yesterday and found that they had indeed ... Yes it is a phishing email. ...
      (comp.sys.acorn.misc)
    • Is this phishing?
      ... I don't have a Paypal account and I don't have a Skype account either. ... RCS Luxembourg B 118 349 ... Receipt for Your Payment to Skype ...
      (comp.sys.acorn.misc)
    • Re: Skype and ebay auctions
      ... Skype ignores PayPal-siphoning hijack scheme ... Frantic emails reporting the problem remain ... Newfoundland, Canada-based graphics artist, whose account has been ...
      (uk.people.consumers.ebay)
    • [Full-disclosure] Skype Account Service - Reset (Session) Password/Username Vulnerability
      ... Skype Account Service - Reset Vulnerability ... The Vulnerability Laboratory Research Team discovered a critical session vulnerability in Microsofts Skype Account Service Application. ...
      (Full-Disclosure)