Re: skype not so anonymous...

2006-09-04 Thread Marcos el Ruptor
One thing is possible with Skype: any user can easily obtain any other 
user's IP address (actually both internal and external IPs). Those users 
don't even need to be on his contact list. Of course one would need cracking 
tools or a decrypted patched Skype executable with all the 288 integrity 
checks removed to make Skype spit out its debugging logs, unless one knows 
the right values for the HKCU\Software\Skype\Phone\UI\General\Logging and 
Logging2 registry keys that Skype checks comparing their MD5 hashes. There 
is not much else that can be done, but that is one possibility. Of course, 
if a direct connection is established, any TCP/IP monitoring tool would show 
all the contacted IPs.


Although in this case it's obviously the man's stupidity using an instant 
messenger with his old virtual identity that got him tracked down. No one 
stopped him from registering a different Skype account to contact whoever he 
trusted if he didn't want to be found. But I have to agree that Skype could 
be made anonymous and is not anonymous at all. It's much harder to obtain 
someone's IP address in other instant messengers where users can disallow 
direct connections and thus remain anonymous at least to other users.


Ruptor 



-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


Re: skype not so anonymous...

2006-09-04 Thread John Ioannidis
 Although in this case it's obviously the man's stupidity using an instant 
 messenger with his old virtual identity that got him tracked down. No one 

For that matter, he could just have gotten a phonecard and used a
payphone.  Wearing sunglasses, a wig and a false beard while limping
to and from the payphone would have even rendered surveillance cameras
useless.  Sometimes the way to defeat high-tech policing is with
low-tech measures.  Unfortunately, the terrorists have already figured
this out.

/ji


-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


Re: skype not so anonymous...

2006-09-03 Thread Leichter, Jerry
| Fugitive executive is tracked down by tracing his Skype calls...
| 
| http://arstechnica.com/news.ars/post/20060824-7582.html
...maybe.  This article gets many fundamental details wrong.  For
one thing, Alexander wasn't nabbed - the very article they linked
that word to simply says he was found.  But even ignoring that,
more recent newspaper articles leave all kinds of things unclear.
What we have is a publicity-seeking (not just in this instance, he
has a history of this kind of thing) private detective who made some
unverified (as of news reports 2 days ago, anyway) claims about having
found and seen Alexander in Sri Lanka.  If I remember the stories
correctly, the PI said *something* about Skype, the reporters asked
him if he'd tracked Alexander down through his use of Skype, and
the PI never quite answered.

Whether Skype is anonymous or not, I have no clue.  But this article
gives no useful evidence one way or another.
-- Jerry

| Perry
| 
| -
| The Cryptography Mailing List
| Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]
| 

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


skype not so anonymous...

2006-08-27 Thread Perry E. Metzger

Fugitive executive is tracked down by tracing his Skype calls...

http://arstechnica.com/news.ars/post/20060824-7582.html

Perry

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]