Re: ahem... skype on o'bsd

2006-12-11 Thread Vim Visual

the proof ;)

http://www.aei.mpg.de/~pau/skype.png

I don't have any contacts under that nickname; therefore the list is empty...

Anyway... I would like to employ something like ekiga instead but I
see that there is not a package for it and I didn't find it in the
ports tree...

Cheers,

Pau

2006/12/11, Vim Visual [EMAIL PROTECTED]:

Hi Matt,

yes, I can sign-in and I can see all my contacts etc. However, I get
an skype has experienced a database error; and I am afraid the
solution is to run the programme as root, which I don't like at all. I
am looking for a solution... Maybe the groups file

Anyway I cannot check it out because I am having some trouble with the
micro configuration in my o'bsd crashbox... and I do not have much
time to play around with these things.

In any case you can try yourself. Download the static binary and then
use linux emulation with the following libraries:

ld-linux.so.2
libGL.so.1
libICE.so.6
libSM.so.6
libX11.so.6
libXau.so.6
libXcursor.so.1
libXext.so.6
libXfixes.so.3
libXft.so.2
libXmu.so.6
libXrandr.so.2
libXrender.so.1
libXt.so.6
libXxf86vm.so.1
libasound.so.2
libc.so.6
libdl.so.2
libdrm.so.2
libexpat.so.0
libexpat.so.1
libfontconfig.so.1
libfreetype.so.6
libgcc_s.so.1
libm.so.6
libpthread.so.0
librt.so.1
libstdc++.so.5

I can send you the libraries if you wish (makes 2MB) but don't want to
overload the mailing list with... spam :)

in any case I would like to listen to what people think of using skype
on an o'bsd system. Let's make the axiom that skype is not
malware/spyware etc (as they state on their page). We have to blindly
trust them because it's CLOSED; they give you a binary.

Now... what happens when you start a conversation over skype? Does
this make your system more vulnerable? attackable?

I'm just learning...

thanks

Pau

-- Forwarded message --
From: Matt Hildebrand [EMAIL PROTECTED]
Date: 11/12/2006 06:36
Subject: Re: ahem... skype on o'bsd
To: [EMAIL PROTECTED]


I did this too a while ago (on 3.9-release, I think), and skype would
even start up, but it would crash during sign-in.  Have you had more
success?  If so, I'm sure the list would be interested...  :-)

Best,
-Matt


On 12/10/06, Vim Visual [EMAIL PROTECTED] wrote:
 I know, I know... but I was just curious...

 I just wanted to know whether it's possible and I simply wanted to
 report here that I successfully installed the static binary on my
 o'bsd crashbox... I just had to look for the libraries

 good night

 Pau




Re: ahem... skype on o'bsd

2006-12-11 Thread Tobias Weisserth

Hi,

On Dec 11, 2006, at 6:15 PM, Vim Visual wrote:


the proof ;)

http://www.aei.mpg.de/~pau/skype.png

I don't have any contacts under that nickname; therefore the list  
is empty...


I would be careful with Skype. My father's Mandriva Linux PC was  
trojaned using an outdated version of Skype as entry point.


Maybe you should post a systrace policy along with how to use Skype  
in OpenBSD ;-)


regards,
Tobias W.



Re: ahem... skype on o'bsd

2006-12-11 Thread Olivier Meyer
Right:

Skype is completely closed source, and the developers have admitted that the
only reason it is not open source, is because the security is too weak. See
http://www.theregister.co.uk/2004/06/15/voip_and_skype/page3.html
and look at the bottom:
Would he[Niklas Zennstrom, co-founder of Skype] make Skype open-source? No
- that would make its strong 1024 bit encryption and security vulnerable:
We could do it but only if we re-engineered the way it works and we don't
have the time right now.
This is merely security by obscurity. According to a security analysis
presented at BlackHat, the code is protected with many layers of obfuscation
and encryption, intended to prevent reversing.
Here is relevant sections of the EULA(
http://www.skype.com/company/legal/eula/):

4.1 *Utilization of Your computer.* You hereby acknowledge that the Skype
Software may utilize the processor and bandwidth of the computer (or other
applicable device) You are utilizing, for the limited purpose of
facilitating the communication between Skype Software users.

So, basically, you accept the fact that Skype will use any and all resources
to facilitate communication. How does anyone know that there is not a
backdoor that can bes used to access any machine running Skype.

On 12/11/06, Tobias Weisserth [EMAIL PROTECTED] wrote:

 Hi,

 On Dec 11, 2006, at 6:15 PM, Vim Visual wrote:

  the proof ;)
 
  http://www.aei.mpg.de/~pau/skype.png
 
  I don't have any contacts under that nickname; therefore the list
  is empty...

 I would be careful with Skype. My father's Mandriva Linux PC was
 trojaned using an outdated version of Skype as entry point.

 Maybe you should post a systrace policy along with how to use Skype
 in OpenBSD ;-)

 regards,
 Tobias W.




-- 
If I am laughing, check your backups.