Re: Skype Call Traced

2006-08-27 Thread Taka Khumbartha

On 8/26/06, Mike Perry [EMAIL PROTECTED] wrote:
snip

I also find it unpossible that actual watermarking was used against
this fellow as opposed to simple IP tracking.


i would not doubt that; that article about tracking anonymous voip
calls is nearly a year old.


Re: Skype Call Traced

2006-08-27 Thread Mike Perry
Thus spake Andrew Del Vecchio ([EMAIL PROTECTED]):

 Damn. Unpossible? This sounds like Double-Plus ungood newspeak man! :P

Yes, I actually am an agent of an unknown branch of an unmentionable
TLA dedicated to the slow and subtle corruption of teh english
language to suit our nefarious ends for world domination.  Snakes On A
Tor was just my cover to distract you long enough to become infected
by our neurolinguistic virus, and the Metatroller has hidden code in
its regular expressions that report your wearabouts directly to our
array of orbiting mind control lasers. ;)

-- 
Mike Perry
Mad Computer Scientist
fscked.org evil labs


Re: Skype Call Traced

2006-08-27 Thread Jacob Yocom-Piatt
 Original message 
Date: Sun, 27 Aug 2006 02:44:06 -0500
From: Mike Perry [EMAIL PROTECTED]  
Subject: Re: Skype Call Traced  
To: or-talk@freehaven.net

Thus spake Andrew Del Vecchio ([EMAIL PROTECTED]):

 Damn. Unpossible? This sounds like Double-Plus ungood newspeak man! :P

Yes, I actually am an agent of an unknown branch of an unmentionable
TLA dedicated to the slow and subtle corruption of teh english
language to suit our nefarious ends for world domination.  Snakes On A
Tor was just my cover to distract you long enough to become infected
by our neurolinguistic virus, and the Metatroller has hidden code in
its regular expressions that report your wearabouts directly to our
array of orbiting mind control lasers. ;)


LOL! all i can say is that i'm glad kobi alexander blew his cover, he's a first
class corporate POS.

i'm suddenly feeling the drive to write volumes upon volumes of paranoia driven
stories about the future.

-- 
Mike Perry
Mad Computer Scientist
fscked.org evil labs


Re: Skype Call Traced

2006-08-26 Thread Jay Goodman Tamboli

On 2006.08.26, at 15:40, Taka Khumbartha wrote:


would torify'ing Skype have prevented this tracking?


I believe Skype is UDP-based, and Tor can only work with TCP  
connections. There are probably other issues as well.


/jgt
--
http://tamboli.cx/
PGP Key ID: 0x7F2AC862B511029F




Re: Skype Call Traced

2006-08-26 Thread Mike Perry
Thus spake [EMAIL PROTECTED] ([EMAIL PROTECTED]):

 On Sat, Aug 26, 2006 at 03:48:54PM -0400, [EMAIL PROTECTED] wrote 0.3K bytes 
 in 12 lines about:
 : I believe Skype is UDP-based, and Tor can only work with TCP  
 : connections. There are probably other issues as well.
 
   Skype works fine over Tor.  Depending upon your circuit, voice
   calls can be very laggy.

Hrmm.. According to:
http://www.secdev.org/conf/skype_BHEU06.handout.pdf

Skype does TCP if UDP attempts fail. However it appears to encode your
IP address in messages. Sort of defeats the purpose of Torifying it.
Probably the case with a lot of voice clients, unless you can find a
way to get them to not discover your IP...

I also find it unpossible that actual watermarking was used against
this fellow as opposed to simple IP tracking.

-- 
Mike Perry
Mad Computer Scientist
fscked.org evil labs


Skype Call Traced

2006-08-24 Thread Matej Kovacic
Skype Call Traced

Kobi Alexander fled the United States ten days ago. He was tracked down
in Sri Lanka via a Skype call:

According to the report, Alexander was located after making a
one-minute call via the online telephone Skype service. The call, made
from the Sri Lankan capital Colombo, alerted intelligence agencies to
his presence in the country.

Ars Technica explains:

The fugitive former CEO may have been convinced that using Skype
made him safe from tracking, but he -- and everyone else that believes
VoIP is inherently more secure than a landline -- was wrong. Tracking
anonymous peer-to-peer VoIP traffic over the Internet is possible (PDF).
In fact, it can be done even if the parties have taken some steps to
disguise the traffic.

Let this be a warning to all of you who thought Skype was anonymous.

http://www.schneier.com/blog/archives/2006/08/skype_call_trac.html

http://ise.gmu.edu/~xwangc/Publications/CCS05-VoIPTracking.pdf