Hot answers tagged skype
9
Yes, be alarmed. It looks like something injected into Skype is trying to communicate with an untrusted server in Ukraine. There's no reason for Skype to be doing this normally.
A bit of investigation on the domain returns this information:
domain: pakko.ua
admin-c: PC226-UANIC
tech-c: IMENA-UANIC
status: OK-UNTIL 20131123175521
dom-public: ...
8
It's exceedingly difficult to block Skype file transfers at the network level. They've designed it to use common ports (80 / 443) and proprietary encryption (albeit an extension to SSL) along with UPnP NAT holepunching to ensure absolutely minimal conflicts and setup issues. Remote file transfers go through supernodes as part of a P2P architecture, so it's ...
6
This might simply be a Skype Supernode (I no longer think so), that said, I think there are some red flags:
The server is in Ukraine and it belongs to a company that doesn't seem to have business with Microsoft/Skype, and they don't seem to be in a position to host a Skype Supernode.
Server is running ProFTPD 1.2.10 behind an open port 21. I don't see why ...
4
There have been several suggestions that skype is indeed backdoored and evesdroppable. If your concerned about it because Microsoft is now the owner, there are plenty of other alternatives to Skype which I would suggest as the easiest and cleanest solution (besides, if MS is your competitor, why would you buy their services). Some of the alternatives like ...
3
Skype uses a Peer to Peer model to route "calls" through the internet which means that part of the lookup function is being routed through unknown third parties.
Microsoft (when they bought Skype) changed the model earlier this year so that it mainly routes through semi-trusted nodes (i.e. not some guys home broadband!) which they call "Supernodes" - ...
3
According to Vanilla Skype Part 2 [page 67], when you ask Skype to save your password, it takes a hash md5(username\nskyper\npassword) then it encrypts it using AES-256 and it stores it /home/USER/.Skype/SKYPE_USER/config.xml (config->Lib->Account->Credentials3).
I have just tried to copy config->Lib->Account->Credentials3 to a config.xml ...
2
First off, I'd consider calling support:
https://support.skype.com/en/faq/FA109/i-ve-forgotten-my-password
Secondly, a recovery process has been outlined here: http://insecurety.net/?p=427
It is NOT as simple as running JTR on the conf.xml file ....
2
That Skype might be backdoored has long been a concern. See link below.
https://ultraparanoid.wordpress.com/2007/06/19/why-skype-is-evil/
I also noted in a past review I did that the official, independent crypto review and the description gained by a reverse engineering team differed significantly. The latter had design flaws and working exploits. Also, ...
1
This will probably be your best bet (assuming you're more interested in getting your account back quickly, rather than hacking around):
https://support.skype.com/en/faq/FA109/i-ve-forgotten-my-password
I no longer use the email address I registered when I created my Skype account and I have never paid for any Skype product
Even if you’ve never ...
1
In a virtual machine, install Skype, make note of every file on the computer and get a checksum of the files. Then log in with a Skype account and save the password. This will change or add some file on your computer. From there you can find where Skype store their password.
An alternative option is to call customer support and see if they can help you ...
Only top voted, non community-wiki answers of a minimum length are eligible

