Microsoft sees all your HTTPS links in Skype, and you didn't know
This was first picked up by an anonymous tipster, who informed Heise Security since it bore similarity to a replay attack. Somewhat ironically, Microsoft themselves explain what a replay attack is. In a nutshell, it's repeated legitimate traffic, which is then treated as such.
Heise was able to confirm the tipster's suspicions, using two test URLs to do so. They sent a URL containing login information, and one pointing to a cloud-based service. Both URLs were later revisited by a Redmond IP address, so it was no isolated incident.
You may wonder how this can be justified. It's in Skype's data protection policy, and is for 'preventing spam, fraud or phishing links'.
This bit in the policy has Microsoft covered.
You may remember the open letter which was published after Microsoft's Skype takeover. It queried how the giant would act with US government requests, and whether they would invade user privacy.
Whether you consider this revelation with secured web links an invasion or not, it'll doubtless have some effect.
Posted:
Related Forum: PC General Forum
Source: http://www.neowin.net/news/microsoft-sees-all-your-https-links-in-skype-and-you-didnt-know
Related Articles
Comments
slapshot101Posted:
This is crazy but is that far fetched, the U.S. government was just caught recording all the numbers and locations of the people who made calls with Verizon, because they said it was for Homeland Security, this is the same thing, but on a private scale.
ChiPosted:
Wiz- An easy way to bypass this is to add an extra character to the link. E.g thetechgame.com/scam/scam/scam, I would put thetechgame6.com/6scam/6scam. Basically, if you want to stay secure then agree with your buds on a certain character you'll add to links here and there, and then they'll know and remove them. Easy.
Ha, wouldn't that be something. ; )
AlbericiPosted:
Why do they spy on us -_- they have enough money so stop putting ads all overeverything and looking up what we look up.
GoldPeakTeaPosted:
Wiz- An easy way to bypass this is to add an extra character to the link. E.g thetechgame.com/scam/scam/scam, I would put thetechgame6.com/6scam/6scam. Basically, if you want to stay secure then agree with your buds on a certain character you'll add to links here and there, and then they'll know and remove them. Easy.
That makes perfect sense! LOL
Wiz-Posted:
TriGz_Recon If one person gets your Skype name and they hate you they can just boot you offline :/ so its always a good idea to use a VPN when in Skype
Why are you saying this? To seem like you know what's going on when someone's getting booted offline? Pfft. This is not on topic and plain retarded. I swear half of the users on here do the same thing, must be a disabled thing.
Wiz-Posted:
An easy way to bypass this is to add an extra character to the link. E.g thetechgame.com/scam/scam/scam, I would put thetechgame6.com/6scam/6scam. Basically, if you want to stay secure then agree with your buds on a certain character you'll add to links here and there, and then they'll know and remove them. Easy.
OGPurgePosted:
slapshot101Cougar Like this wasn't known already, they have everything on you.
All these companies have all the information on you, don't you think that Safari, Firefox and Chrome save everything on you too?
Yep that`s how the government finds your crap out.
Latest Downloads
- 01. Pac-Man Championship Edition (Xbox 360)(0)
- 02. Crash Of The Titans (Xbox 360 - Game Save 93% complete)(0)
- 03. Titan Quest - Anniversary Edition: SaveGame (Level 85 caster)(0)
- 04. [EU] Space Roguelike Adventure (Insta-Plat Save) [CUSA35362](2)
- 05. Operation: Matriarchy - SaveGame (The Game done on hard difficulty) [1.0](1)
- 06. LEGO Star Wars: The Skywalker Saga - SaveGame (The game done 100%) [Steam](2)
- 07. Through the Woods: SaveGame (The Game done 100%) [Steam](1)
- 08. Humans are not that against Lizardwomen: SaveGame (The Game done 100%)(1)
- 09. Tekken 1 100% save game file for Retroarch US version(0)
- 10. The Expanse: A Telltale Series - SaveGame (all chapters are opened, trophies are unlocked)(1)
- 11. Need for Speed: Most Wanted (2005) - SaveGame (Good start, 6 cars) [1.0](1)
- 12. Commandos: Strike Force - SaveGame(1)
- 13. Mario Party 2 100% Complete Save(4)
- 14. Mario Party 2 (Virtual Console) Save(0)
- 15. My Summer Car: SaveGame (Satsuma blue moon)(0)
Latest Tutorials
- 01. The Redress Of Mira 100% Walkthrough | Trophy & Achievement(793)
- 02. Russian Pinocchio Quick Trophy Guide(1,060)
- 03. Venatrix Quick Trophy & Achievement Guide(1,140)
- 04. Call of the Sea 100% Platinum Walkthrough(1,073)
- 05. Wire Lips 100% Platinum Walkthrough(1,171)
- 06. The Expanse 100% Platinum Walkthrough | Trophy & Achievement(1,022)
- 07. Doctor Who: The Edge of Reality - PS4 Platinum P/Thru(957)
- 08. Doctor Who:The Lonely Assassins - 100% Guide(805)
- 09. DAYMARE 1998 PS4 - Full game 100% TROPHY WALKTHROUGH(847)
- 10. Stray Platinum Walkthrough | Trophy & Achievement Guide(802)
- 11. Raji: An Ancient Epic | Complete Gameplay Walkthrough(1,086)
- 12. Corpse Killer: 25th Anniversary Edition - Longplay(1,055)
- 13. Song of Horror: Complete Edition Gameplay Walkthrough(747)
- 14. Remoteness 100% All Trophies Walkthrough(1,176)
- 15. Detective Inspector Mysterious Clues Platinum Walkthrough(875)
"Microsoft sees all your HTTPS links in Skype, and you didn't know" :: Login/Create an Account :: 49 comments