full-disclosure - Re: [ Capture Skype trafic ]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 28 Oct 2006 11:53:27 -0400
From: gabriel rosenkoetter <gr@...ipsed.net>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: [ Capture Skype trafic ]

On Sat, Oct 28, 2006 at 11:24:40AM +0200, Cedric Blancher wrote:
> Have you ever header of Skype API that basicly allows two application to
> communicate on top of Skype network, thus inheriting Skype resilience,
> encryption, obfuscation and firewall punching capapbilities ?

I don't see how this isn't still an HR problem.

Unless you're concerned about infected systems communicating in this
way as part of a zombie network? In that case, your vector to fix it
is dealing with your broken virus checking.

Setting up network filtering to keep your internal users from doing
something, rather than persuading them that they should not do that,
will never, ever work.

-- 
gabriel rosenkoetter
gr@...ipsed.net

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/