Skype - exposed

[syringe]

Hey guys as the popularity of this messenger-voip communication software, grows I was thinking to investigate the security side of this software:

-Communication security
-Local security
-overall security issues

Please post any information u came across (security related) in regarding to this software!

 

[jeremy]

heres what i found
http://articles.news.aol.com/business/article.adp?id=20060216153509990024
http://www.ctv.ca/servlet/ArticleNe...ype_eavesdropping_060216/20060216?hub=SciTech
http://www.networkworld.com/community/?q=node/3375
http://www.strike-the-root.com/3/blow/blow6.html
http://www.smh.com.au/news/breaking/is-skype-a-wiretap-killer/2006/02/17/1140151801336.html
http://www.skype.com/security/files/2005-031 security evaluation.pdf
http://www.usatoday.com/printedition/money/20060217/2b_skype17.art.htm
http://blogs.zdnet.com/ip-telephony/index.php?p=919
http://arik.baratz.org/wordpress/2005-10-11/skypes-encryption/
http://www.voipplanet.com/trends/article.php/3567391

if you ask me this program probably have a much strong encryption
http://www.famatech.com/products/radmincs/ (not free)
but it doesnt use public servers like skype

 

[syringe]

it uses RC5 to chiper its text chat communication but the key can be recoverd from outgoing UDP datagam... whats the point !! script kiddie protection

how about local security where does it store passwords / conversation history / crypted or not?