Full Disclosure mailing list archives

Re: **VL-JUNK** Re: Skype account + IM history hijack vulnerability


From: Georgi Guninski <guninski () guninski com>
Date: Wed, 14 Nov 2012 14:20:17 +0200

I will drink to that :)

Was this "feature" in skype before microsoft bought/ruined them?



On Wed, Nov 14, 2012 at 08:15:51AM -0300, Chris C. Russo wrote:
I'm just not replying, because I have no comments, I can't believe how a
huge service like skype doesn't have proper security measures in their
website and client.

Chris C. Russo

Desarrollamos soluciones para hacer el mundo un lugar más seguro,
conocemos el valor de su información.

w: www.calciumsec.com
m: chris () calciumsec com
m: +54-911 6610-1900

On 14/11/2012 08:00 a.m., Benji wrote:
This has nothing to do with the client. The service is at fault.

Also for the record, r/netsec is a huge circlejerk.


On Wed, Nov 14, 2012 at 10:20 AM, Kirils Solovjovs <
kirils.solovjovs () kirils com> wrote:


The team has worked around this and are now trying to fix the
bug/feature. :)


http://www.reddit.com/r/netsec/comments/13664q/skype_vulnerability_allowing_hijacking_of_any/


P.S. Not to say that there aren't any other security bugs to come. Use a
secure  client!

--
Kirils Solovjovs

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: