Printed from http://www.electronista.com

Skype security hole could give away locations, P2P traffic

updated 05:15 am EST, Fri December 9, 2011

Skype flaw allows geo-tracking of users

Researchers have uncoveredwhat looks like a serious security flaw in Skype that could easily allow a hacker to track a user's movements as well their P2P file-sharing activity. Scientists from New York University's Polytechnic Institute monitored 10,000 random Skype users and 20 volunteers over a two-week period discovered the vulnerability. They found that callers using VoIP can obtain the IP address of another user simply by calling them allowing them to use geo-IP mapping services to determine their location and ISP.

A malicious caller could initiate a Skype call, block certain data packets and then terminate the call almost immediately to obtain their IP address without the other party even being alerted to the call with a ringtone or other notification. Worse, the hacker does not need to be on the victims contact list, while the hack can still be accomplished even when a Skype user takes the time to configure the app to block calls from non-contacts.

In one example, the scientists tracked a Skype user holidaying in New York to Chicago and then back to their homeland in France. According to the researchers, a simple an inexpensive fix could stop the hackers from making the initial discovery. Skype is said to be working on a fix.

This is not the first time that Skype users have been potentially exposed to hackers. Earlier this year, Skype users on Android were left vulnerable to a code exploit that allowed hackers to obtain a user's personal information.



By Electronista Staff
Post tools:

TAGS :

toggle

Comments

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

toggle

Most Popular

Sponsor

Recent Reviews

SMS Audio Sync Sport on-ear headphones

When hitting the gym or going out for a trail run, headphones can cause a number of problems. From the ear buds getting slimy with swe ...

Adesso Xtream S3B Bluetooth speaker

Finding a speaker purpose-built for a specific need is challenging. Even when a Bluetooth speaker can be paired with a mobile device, ...

JBL Synchros E40BT headphones

For all the different configurations of headphones on the market, it's always a tough choice for buyers to get something that is just ...

Sponsor

toggle

Most Commented

 
toggle

Popular News