Determination of IP-address in Skype
In the meantime, at least a month the Skypegrab service is publicly available, which allows you to determine the user's IP address for Skype (it is now working, though slowly and clumsily, but it previously accurately determined correctly). Despite the fact that this feature, as some say, is “obvious” due to the use of the p2p system, many believe that Skype reliably protects the IP address.
It is easy to find out that Skype itself often establishes direct connections between users, and therefore, using a simple traffic analyzer, you can get an IP address (once, like, intermediate "supermodes" were used, then information appeared about their disappearance and replacing with Microsoft servers, but at the moment there are still direct connections, as if they are always set up when Skype has a public IP address that allows incoming connections.
In the existing beta version, Microsoft added the possibility of hiding the IP address when making calls not from contacts (after that Skypegrab really stops working, but the question remains with data leakage to contacts). It is not very clear what sense to limit to half-measures, and is it not easier to add the option "always use an intermediate node". Interestingly, the IP address detection vulnerability was discovered on Skype back in 2012, but administrators apparently limited themselves to service bans without eliminating the causes of the vulnerability.
Security problems were in Skype and earlier, for example, it worked quite strangely when prescribing the proxy server socks (sometimes it worked directly without using a proxy, by indirect signs - hooked up the settings from the browser). Even for direct connections, Skype always uses the same port for months and when changing the external IP address, which allows you to track the IP addresses of users once having determined its IP address and port. In general, for paranoid Skype is becoming increasingly unattractive.
It is easy to find out that Skype itself often establishes direct connections between users, and therefore, using a simple traffic analyzer, you can get an IP address (once, like, intermediate "supermodes" were used, then information appeared about their disappearance and replacing with Microsoft servers, but at the moment there are still direct connections, as if they are always set up when Skype has a public IP address that allows incoming connections.
In the existing beta version, Microsoft added the possibility of hiding the IP address when making calls not from contacts (after that Skypegrab really stops working, but the question remains with data leakage to contacts). It is not very clear what sense to limit to half-measures, and is it not easier to add the option "always use an intermediate node". Interestingly, the IP address detection vulnerability was discovered on Skype back in 2012, but administrators apparently limited themselves to service bans without eliminating the causes of the vulnerability.
Security problems were in Skype and earlier, for example, it worked quite strangely when prescribing the proxy server socks (sometimes it worked directly without using a proxy, by indirect signs - hooked up the settings from the browser). Even for direct connections, Skype always uses the same port for months and when changing the external IP address, which allows you to track the IP addresses of users once having determined its IP address and port. In general, for paranoid Skype is becoming increasingly unattractive.
')
Source: https://habr.com/ru/post/182154/
All Articles