Welcome to By-IP.com | VoIP technology | Skype | Cell Phone!


Beware eBay bearing Skype. Ominous security omens

<<<... "Skype uses AES (Advanced Encryption Standard), also known as Rijndael, which is used by U.S. Government organizations to protect sensitive, information. Skype uses 256-bit encryption, which has a total of 1.1 x 1077 possible keys, in order to actively encrypt the data in each Skype call or instant message. Skype uses 1024 bit RSA to negotiate symmetric AES keys. User public keys are certified by the Skype server at login using 1536 or 2048-bit RSA certificates." Here's the problem with that statement: since Skype is an insistently closed source program - and one that additionally uses a proprietary protocol, but I'll get to that in a moment - we have no way of verifying Skype's security. We simply have to take them at their word that their encryption works. For such an important program, that's quite a problem. I'm just not sure how safe I feel when Skype says: "Trust me - everything's going to be fine." Say what?!

That's bad enough, but now Skype is going to be owned by eBay. I know that lots of people just loooove eBay. I use them myself, most recently to enhance my Li'l Abner comics collection, but I'm careful about the information I give them. Why? Well, it seems that there are three kinds of companies: those that fight for customers' privacy in the face of the demands of law enforcement; those that require some sort of official, constitutionally-mandated documents - like, oh, say, a warrant or subpoena - before handing over customer info to the cops; and eBay ... more >>>