I am still baffled by the fact that it is still possible to do a dual, triple, quadruple (and so on) simultaneous login to one Skype_ID (without notification). Anyways, it’s a feature… as I was told many times… (but one that annot be switched off). Security and Skype, always interesting as a topic. I have spiced up this article with google search links, while reading. The concent has been left unchanged of course. I am putting the full article here because it makes sense. It put’s the right things in perspective. Very interesting. A must read, mainly because it is full of contradicting statements, all expressing the different perspectives. When reading this (you can say and think what you want), it will be just a matter of time before «P2P Kevin Mitnick scenario’s» pop up.
Two statement cought my eye :
- «Users preoccupied with Skype's security features "are usually criminals and other assorted nefarious types
- «Sauer declined to discuss Skype interactions with law enforcement, beyond saying the service "complies with lawful requests for information." Nor would he explain what calling records Skype keeps.»
- «Skype could become a juicy target for hackers.»
Internet service Skype (skype.com) last week offered anyone in the United States and Canada free phone calls from personal computers to telephones in both coun tries through Dec. 31. All you need is free Skype software, a headset and microphone for your computer and an Internet connection, preferably broadband.
"Nobody's listening in," Skype promises on its Web site.
Protection from snoops has been a Skype theme since the company introduced free -- and heavily encrypted -- computer-to-computer calls in 2003. Free and secure calls would seem an unbeatable combo, given the controversy about warrantless eavesdropping in Washington.
CIA director nominee Michael Hayden last week defended the National Security Agency's monitoring -- without court approval -- of domestic calls and e-mails involving overseas callers suspected of terrorism. Call records of millions of Americans also have been sifted by the NSA, according to USA Today.
Tom Berson, a security analyst hired by Skype last year, concluded, "The confidentiality of a Skype session is far greater than that offered by a wired or wireless telephone call or by e-mail and e- mail attachments."
But other security mavens, and comments from Skype, suggest Skype's latest calling plan isn't really a refuge for Americans worried about Big Brother.
Skype is "no absolute solution," said Tony Rutkowski, a security expert with VeriSign, of Mountainview, Calif., and president of the Global Lawful Interception Industry Forum.
For one thing, Skype said Internet calls no longer are encrypted when they reach a telephone. On the phone network, they can be tapped like other calls
And despite rebellious roots -- its founders riled the music indus try with the Kazaa file-sharing system -- Luxembourg-based Skype has warmed to authorities since being acquired last fall by online auction giant eBay of California.
"Skype has in place a process to cooperate with law enforcement requests," Kurt Sauer, Skype's chief security officer, said via e-mail. He referred to a 1994 law requiring telecom companies to ensure their networks can comply with legal wiretaps.
By next year, Internet providers and online phone services also must comply, according to a 2005 Federal Communications Commission ruling. A coalition of Internet companies, libraries and universities is challenging the decision.
Sauer declined to discuss Skype interactions with law enforcement, beyond saying the service "complies with lawful requests for information." Nor would he explain what calling records Skype keeps.
In a lawsuit, the Electronic Frontier Foundation accused AT&T of illegally handing over customer records to the NSA.
Among tidbits emerging from that case is AT&T's use of a Silicon Valley company called Narus to analyze its Internet traffic. On its Web site, Narus advertises products for "lawful intercepts" of Internet communications, including playback of Internet calls and "Skype detection and blocking."
Since its launch in Estonia, Skype said its has attracted more than 100 million global users and 6 million in the U.S. The free computer-to-phone calls are meant to introduce Skype to a larger audience, and boost use of fee-based services like voicemail and ring tones.
Skype hopes to grow the market for a pay-per-call advertising business, similar to the pay-per- click model of Google and Yahoo. Skype envisions charging advertisers a fee each time someone uses Skype to call them.
Users preoccupied with Skype's security features "are usually criminals and other assorted nefarious types," Rutkowski said via e-mail.
In any case, barring software glitches, Skype's encryption should "make life much harder for an eavesdropper," said former AT&T researcher Steve Bellovin, now at Columbia University. Third-party products, like the open-source Zfone from encryption pioneer Phil Zimmermann, can add a layer of security to Skype calls, said Bruce Schneier of Counterpane Internet Security. Government snoops may not pose the greatest privacy threat. Avi Rubin, a security researcher at Johns Hopkins University, said Skype could become a juicy target for hackers. "I think it's a matter of time," Rubin said.
As phone services migrate onto Skype, Vonage of Holmdel and other Internet services, conversations can be stored as easily as MP3 music files -- raising many du bious possibilities, said Ira Winkler, a former NSA researcher and author of "Spies Among Us" (Wiley & Sons, 2005). Internet phone communications also are vulnerable to power failures, and maybe to "denial of service" attacks that choke targets with bogus traffic, Winkler said. One thing that does not worry him is the prospect of the NSA mining data from caller records. He thinks bulletproof vests for cops would be a better investment. "Believe me, if NSA efforts had led to an arrest of some sort, they would be crowing like roosters right now," Winkler said.

Source : Internet phone offer: It's free -- and clear