Full Disclosure mailing list archives

Re: **VL-JUNK** Re: Skype account + IM history hijack vulnerability


From: "Chris C. Russo" <chris () calciumsec com>
Date: Wed, 14 Nov 2012 08:15:51 -0300

I'm just not replying, because I have no comments, I can't believe how a
huge service like skype doesn't have proper security measures in their
website and client.

Chris C. Russo

Desarrollamos soluciones para hacer el mundo un lugar más seguro,
conocemos el valor de su información.

w: www.calciumsec.com
m: chris () calciumsec com
m: +54-911 6610-1900

On 14/11/2012 08:00 a.m., Benji wrote:
This has nothing to do with the client. The service is at fault.

Also for the record, r/netsec is a huge circlejerk.


On Wed, Nov 14, 2012 at 10:20 AM, Kirils Solovjovs <
kirils.solovjovs () kirils com> wrote:


The team has worked around this and are now trying to fix the
bug/feature. :)


http://www.reddit.com/r/netsec/comments/13664q/skype_vulnerability_allowing_hijacking_of_any/


P.S. Not to say that there aren't any other security bugs to come. Use a
secure  client!

--
Kirils Solovjovs

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: