Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread ianG
Hi John, On 18/05/13 03:49 AM, John Levine wrote: Maybe we will see subpoenas or public hearings for Microsoft and their Skype. For what? Skype has kept chat logs for years, and the government routinely subpoenas them. Is that a fact? As far as I know, Skype is e2e secure. So Skype

Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread Danilo Gligoroski
John Levine wrote For what? Skype has kept chat logs for years, and the government routinely subpoenas them. It depends how much scared will become the politicians and decision makers in Washington DC and Brussels from the latest publicly revealed security backdoors of Skype. Danilo!

Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread Jeffrey Walton
On Sat, May 18, 2013 at 9:49 AM, Adam Back a...@cypherspace.org wrote: On Fri, May 17, 2013 at 04:52:07AM -0400, bpmcontrol wrote: On 05/17/2013 04:19 AM, Eugen Leitl wrote: It is unreasonable for an closed source product by a commercial vendor to go any other way [putting backdoors in

Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread Florian Weimer
As far as I know, Skype is e2e secure. It hasn't got end-to-end key management, so it can't be end-to-end secure against the network operator. ___ cryptography mailing list cryptography@randombit.net

Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread mark seiden
On May 18, 2013, at 6:49 AM, Adam Back a...@cypherspace.org wrote: On Fri, May 17, 2013 at 04:52:07AM -0400, bpmcontrol wrote: On 05/17/2013 04:19 AM, Eugen Leitl wrote: It is unreasonable for an closed source product by a commercial vendor to go any other way [putting backdoors in security

Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread Jeffrey Walton
On Sat, May 18, 2013 at 1:24 PM, mark seiden m...@seiden.com wrote: ... there are numerous other IM systems that are server centric and do a lot of work to look for and filter bad urls sent in the message stream. this is intended to be for the benefit of the users in filtering spam,

Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread Adam Back
Actually I think that was the point, as far as anyone knew and from the last published semi-independent review (some years ago on the crypto list as I recall) it indeed was end2end secure. Many IM systems are not end2end so for skype to benefit from the impression that they still are end2end

Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread Ethan Heilman
Actually I think that was the point, as far as anyone knew and from the last published semi-independent review (some years ago on the crypto list as I recall) it indeed was end2end secure. Skype has never claimed it is end to end secure in fact they have hinted many times that they can and do

[cryptography] backdoors in commercial software

2013-05-18 Thread Jonathan Thornburg
On Sat, 18 May 2013, Adam Back wrote: Would you expect microsoft IIS web server to contain an SSL backdoor? Or microsoft VPN client? Or cisco? Of course they contain backdoors. It's clear from the the US political and Congressional reaction to the revelations of large-scale NSA domestic

Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread mark seiden
except bad guys will always opt of having their content inspected. so it just doesn't work in this case. On May 18, 2013, at 10:46 AM, Jeffrey Walton noloa...@gmail.com wrote: On Sat, May 18, 2013 at 1:24 PM, mark seiden m...@seiden.com wrote: ... there are numerous other IM systems that

Re: [cryptography] Skype backdoor confirmation

2013-05-18 Thread Ed Stone
Jeffrey Walton wrote: * Scan IM messages for dangerous content from people you don't know. This means company will read (and possibly retain) some of your messages to determine if some (or all) of the message is dangerous. …. Give an choice, it seems like selection two is a good

Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread Jeffrey Walton
On Sat, May 18, 2013 at 5:38 PM, mark seiden m...@seiden.com wrote: except bad guys will always opt of having their content inspected. Right, that's why it becomes the receiver's option for unknown senders. If there's an existing relationship between the sender and receiver, I imagine the rates

Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread Jeffrey Walton
On Sat, May 18, 2013 at 5:40 PM, mark seiden m...@seiden.com wrote: opt *out* of… (obviously) Not possible in many cases. I don't like IM but I have to use it on occasions for my job. Ditto for license agreements from handset manufacturers, carriers, operating systems, business software and the

Re: [cryptography] Skype backdoor confirmation

2013-05-18 Thread mark seiden
On May 18, 2013, at 2:51 PM, Ed Stone t...@synernet.com wrote: Jeffrey Walton wrote: * Scan IM messages for dangerous content from people you don't know. This means company will read (and possibly retain) some of your messages to determine if some (or all) of the message is dangerous.

Re: [cryptography] Skype backdoor confirmation

2013-05-18 Thread James A. Donald
Obviously a secret is no secret the person sending it is not on your buddy list. Conversely, it should not be possible to inspect messages if the person sending it is on your buddy list. ___ cryptography mailing list cryptography@randombit.net

Re: [cryptography] backdoors in commercial software

2013-05-18 Thread Jeffrey Walton
On Sat, May 18, 2013 at 5:26 PM, Jonathan Thornburg jth...@astro.indiana.edu wrote: On Sat, 18 May 2013, Adam Back wrote: Would you expect microsoft IIS web server to contain an SSL backdoor? Or microsoft VPN client? Or cisco? Of course they contain backdoors. It's clear from the the US

Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread John Levine
I was a technical expert in a pump and dump spam trial last fall, and a large part of the evidence was Skype chat logs among the members of the spamming group. Who provided the chat logs? Were they provided by Skype or where they provided by one or the other members? The reason I ask is

Re: [cryptography] skype backdoor confirmation

2013-05-18 Thread Jane
At the risk of sounding rude, crude, and yellow-pressish, I'd like to provide this link http://www.themoscownews.com/russia/20130314/191336455/FSB-Russian-police-could-tap-Skype-without--court-order.html If software has a soul, Skype's is long since sold. Sincerely yours, Jane On Sun, May

Re: [cryptography] backdoors in commercial software

2013-05-18 Thread Jonathan Thornburg
Adam Back asked | Would you expect microsoft IIS web server to contain an SSL backdoor? Or | microsoft VPN client? Or cisco? I replied Of course they contain backdoors. [[...]] Adam Beck also wrote | A lot of businesses and individuals are | relying on these things to do what is advertised.