Comments on: Vulnerabilities in Skype http://www.gnucitizen.org/blog/vulnerabilities-in-skype/ Cutting-edge Think tank | Ethical Hacker Outfit Fri, 04 Jul 2008 17:27:18 +0000 http://wordpress.org/?v=2.5.1 By: A Technocrat’s Blog » Skype Trojan wiretap plan leaks onto the net http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-105773 A Technocrat’s Blog » Skype Trojan wiretap plan leaks onto the net Wed, 30 Jan 2008 10:15:04 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-105773 [...] movie peril also expressed concerns about Skype’s security architecture more generally. He suggested that unencrypted data within Skype’s ads created a means for hackers to taint ad traffic with [...] [...] movie peril also expressed concerns about Skype’s security architecture more generally. He suggested that unencrypted data within Skype’s ads created a means for hackers to taint ad traffic with [...]

]]> By: Skype trojan wiretap plan leaks onto the net | Rochak Chauhan::Unpredictably Exciting http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-105723 Skype trojan wiretap plan leaks onto the net | Rochak Chauhan::Unpredictably Exciting Wed, 30 Jan 2008 08:35:06 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-105723 [...] movie peril also expressed concerns about Skype’s security architecture more generally. He suggested that unencrypted data within Skype’s ads created a means for hackers to taint ad traffic with [...] [...] movie peril also expressed concerns about Skype’s security architecture more generally. He suggested that unencrypted data within Skype’s ads created a means for hackers to taint ad traffic with [...]

]]> By: Bug na busca de vídeo pelo Skype permite instalação de malware http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-103808 Bug na busca de vídeo pelo Skype permite instalação de malware Fri, 25 Jan 2008 23:08:37 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-103808 [...] disco local, além de executá-los” alertou o pesquisador de segurança Petko Petkov, em um post na quinta-feira [...] [...] disco local, além de executá-los” alertou o pesquisador de segurança Petko Petkov, em um post na quinta-feira [...]

]]> By: Bug na busca de vídeo pelo Skype permite instalação de malware | Convergência VoIP http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-103754 Bug na busca de vídeo pelo Skype permite instalação de malware | Convergência VoIP Fri, 25 Jan 2008 21:14:17 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-103754 [...] disco local, além de executá-los” alertou o pesquisador de segurança Petko Petkov, em um post na quinta-feira [...] [...] disco local, além de executá-los” alertou o pesquisador de segurança Petko Petkov, em um post na quinta-feira [...]

]]> By: Skype: Vulnerabilità Cross-Zone Scripting « Simply Security http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-102584 Skype: Vulnerabilità Cross-Zone Scripting « Simply Security Wed, 23 Jan 2008 08:39:17 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-102584 [...] D. Petkov, fondatore della security consultancy GnuCitzen.org, commenta in un intervento dedicato: “L’utente deve solo visitare DailyMotion da ‘Add video to chat’ di Skype e [...] [...] D. Petkov, fondatore della security consultancy GnuCitzen.org, commenta in un intervento dedicato: “L’utente deve solo visitare DailyMotion da ‘Add video to chat’ di Skype e [...]

]]> By: Info World » Blog Archive » Worm fears shut down Skype video feature http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-102493 Info World » Blog Archive » Worm fears shut down Skype video feature Wed, 23 Jan 2008 00:44:03 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-102493 [...] security researcher who has been studying the flaw [...] [...] security researcher who has been studying the flaw [...]

]]> By: Google Search Brasil » Blog Archive » Skype trabalha em vulnerabilidade de segurança de software VoI http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-102491 Google Search Brasil » Blog Archive » Skype trabalha em vulnerabilidade de segurança de software VoI Wed, 23 Jan 2008 00:30:38 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-102491 [...] consultor de segurança Petko Petkov explicou em um artigo que, ainda que um tanto complexo, o ataque é muito possível e razoavelmente prático. O hacker [...] [...] consultor de segurança Petko Petkov explicou em um artigo que, ainda que um tanto complexo, o ataque é muito possível e razoavelmente prático. O hacker [...]

]]> By: Skype flaw turns videos into weapons http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-102064 Skype flaw turns videos into weapons Mon, 21 Jan 2008 11:26:34 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-102064 [...] from the local disc and launching executables,” wrote security researcher Petko Petkov, in a Thursday blog post about the [...] [...] from the local disc and launching executables,” wrote security researcher Petko Petkov, in a Thursday blog post about the [...]

]]> By: Skype blocks poison movie peril : Welcome To Tech-Dump http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-101937 Skype blocks poison movie peril : Welcome To Tech-Dump Mon, 21 Jan 2008 03:02:34 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-101937 [...] criticised Skype’s security architecture more generally. He suggested that unencrypted data within [...] [...] criticised Skype’s security architecture more generally. He suggested that unencrypted data within [...]

]]> By: share and upload blogs » Skype Block Evil Movie http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-101497 share and upload blogs » Skype Block Evil Movie Sun, 20 Jan 2008 01:08:51 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-101497 [...] criticised Skype’s security architecture more generally. He suggested that unencrypted data within [...] [...] criticised Skype’s security architecture more generally. He suggested that unencrypted data within [...]

]]> By: Gravi problemi di sicurezza per Skype. Immediati i rimedi ma forse non ancora sufficienti. | VoipBlog.it http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-101270 Gravi problemi di sicurezza per Skype. Immediati i rimedi ma forse non ancora sufficienti. | VoipBlog.it Sat, 19 Jan 2008 12:33:16 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-101270 [...] Fonte: Gnucitizen [...] [...] Fonte: Gnucitizen [...]

]]> By: HTA Team.info http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-101223 HTA Team.info Sat, 19 Jan 2008 09:07:35 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-101223 [...] по сетевой безопасности Петко Петков (Petko Petkov) в своем блоге, описывая данную [...] [...] по сетевой безопасности Петко Петков (Petko Petkov) в своем блоге, описывая данную [...]

]]> By: Global PWD » Blog Archive » » Skype flaw turns videos into weapons http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-101075 Global PWD » Blog Archive » » Skype flaw turns videos into weapons Fri, 18 Jan 2008 22:24:18 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-101075 [...] from the local disc and launching executables,” wrote security researcher Petko Petkov, in a Thursday blog post about the [...] [...] from the local disc and launching executables,” wrote security researcher Petko Petkov, in a Thursday blog post about the [...]

]]> By: WebMilk.ru - молочные новости Интернета » Скайп превращает видео в оружие для хакеров! http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-101008 WebMilk.ru - молочные новости Интернета » Скайп превращает видео в оружие для хакеров! Fri, 18 Jan 2008 18:59:58 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-101008 [...] по сетевой безопасности Петко Петков (Petko Petkov) в своем блоге, описывая данную [...] [...] по сетевой безопасности Петко Петков (Petko Petkov) в своем блоге, описывая данную [...]

]]> By: Chaim Haas http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-100941 Chaim Haas Fri, 18 Jan 2008 14:12:16 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-100941 Skype provides a full description of the vulnerability on its <a href="http://share.skype.com/sites/security/2008/01/skype_cross_zone_scripting_vul.html" rel="nofollow">Security Blog</a> and the steps that have been taken to neutralize the problem so it doesn't affect users. Skype provides a full description of the vulnerability on its Security Blog and the steps that have been taken to neutralize the problem so it doesn’t affect users.

]]> By: Security Tips » Skype Vulnerability Threatens Video Searchers http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-100937 Security Tips » Skype Vulnerability Threatens Video Searchers Fri, 18 Jan 2008 13:48:18 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-100937 [...] GNU Citizen, PDP said some parts of Skype traffic, like ads, are not encrypted, and likewise travel over an [...] [...] GNU Citizen, PDP said some parts of Skype traffic, like ads, are not encrypted, and likewise travel over an [...]

]]> By: Info World » Blog Archive » Skype flaw turns videos into weapons http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-100918 Info World » Blog Archive » Skype flaw turns videos into weapons Fri, 18 Jan 2008 11:52:54 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-100918 [...] from the local disc and launching executables," wrote security researcher Petko Petkov, in a Thursday blog post about the [...] [...] from the local disc and launching executables," wrote security researcher Petko Petkov, in a Thursday blog post about the [...]

]]> By: pdp http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-100906 pdp Fri, 18 Jan 2008 11:04:02 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-100906 LiquidIce, I think that you commented on the wrong post. This one has nothing to do with UPnP. :) LiquidIce, I think that you commented on the wrong post. This one has nothing to do with UPnP. :)

]]> By: LiquidIce http://www.gnucitizen.org/blog/vulnerabilities-in-skype/#comment-100813 LiquidIce Fri, 18 Jan 2008 03:09:20 +0000 http://www.gnucitizen.org/blog/vulnerabilities-in-skype#comment-100813 There are a few devices that I have seen which cause Windows XP to popup a little tooltip in the task tray saying 'a new device has been detected'. And sometiems when I click on that bubble it opens a webpage. I have not been able to reproduce this, and have not seen it occur lately... Was it fixed in a windows update? Does this have anything to do with SSDP? I was wondering if it is possible to craft an SSDP packet that will signal other XP computers on the network to show that tooltip. Some of the devices that I have seen do this are the Infrant Readynas and a DLink wifi router. I've also noticed that Sonos causes Windows Media Player to popup a tooltip sometimes as well asking to allow it to share it's media. Speaking of sonos... this device runs off upnp. Has anyone here been able to do any interesting things with it? There are a few devices that I have seen which cause Windows XP to popup a little tooltip in the task tray saying ‘a new device has been detected’. And sometiems when I click on that bubble it opens a webpage.
I have not been able to reproduce this, and have not seen it occur lately… Was it fixed in a windows update? Does this have anything to do with SSDP? I was wondering if it is possible to craft an SSDP packet that will signal other XP computers on the network to show that tooltip. Some of the devices that I have seen do this are the Infrant Readynas and a DLink wifi router. I’ve also noticed that Sonos causes Windows Media Player to popup a tooltip sometimes as well asking to allow it to share it’s media.

Speaking of sonos… this device runs off upnp. Has anyone here been able to do any interesting things with it?

]]>