📜 ⬆️ ⬇️

Skype views the content of the links sent to the chat.

image

Rather, it bypasses all HTTPS links sent to the chat by a HEAD request.

Steps to play:
')
1. We send a chat link with https which was previously not sent via Skype

2. After 10-40 minutes, we observe the HEAD request in the access log from the 65.52.0.0/14 network owned by Microsoft. The request comes without a User-Agent.

Excerpt from the user agreement reads as follows:

"Identify suspected spam and / or (b) identify URLs that have been previously flagged as spam, fraud, or phishing links."


Based on this, I think it is impossible to argue that Skype no longer uses point-to-point encryption between clients. It is possible that the new versions of the client themselves send links.



More detailed materials on the topic:

lists.randombit.net/pipermail/cryptography/2013-May/004224.html
www.h-online.com/security/news/item/Skype-with-care-Microsoft-is-reading-everything-you-write-1862870.html
www.h-online.com/security/features/Skype-s-ominous-link-checking-facts-and-speculation-1865629.html
news.ycombinator.com/item?id=5728294

Source: https://habr.com/ru/post/180147/


All Articles