{"id":11119,"date":"2020-04-08T14:12:11","date_gmt":"2020-04-08T14:12:11","guid":{"rendered":"https:\/\/merikebi.warrenmyers.com\/?p=11119"},"modified":"2020-04-08T14:12:11","modified_gmt":"2020-04-08T14:12:11","slug":"new-comment-on-reddit-898","status":"publish","type":"post","link":"https:\/\/merikebi.warrenmyers.com\/?p=11119","title":{"rendered":"New comment on reddit"},"content":{"rendered":"<div class=\"md\">\n<blockquote>\n<p>In the early days of Skype when it was owned by Niklas Zennstr\u00f6m and friends, it had end to end encryption.<\/p>\n<\/blockquote>\n<p>Wikipedia (<a href=\"https:\/\/en.wikipedia.org\/wiki\/Skype\">https:\/\/en.wikipedia.org\/wiki\/Skype<\/a>) indicates, however:<\/p>\n<blockquote>\n<p>Skype was claimed initially to be a secure communication, with one of its early web pages stating &quot;highly secure with end-to-end encryption&quot;. Security services were invisible to the user, and encryption cannot be disabled. Skype reportedly uses publicly documented, widely trusted encryption techniques: RSA for key negotiation and the Advanced Encryption Standard to encrypt conversations. However, it is impossible to verify that these algorithms are used correctly, completely, and at all times, as there is no public review possible without a protocol specification and\/or the app source code. Skype provides an uncontrolled registration system for users with no proof of identity. Instead, a free choice of nicknames permits users to use the system without revealing their identities to other users. It is trivial to set up an account using any name; the displayed caller&#39;s name is no guarantee of authenticity. A third-party paper analyzing the security and methodology of Skype was presented at Black Hat Europe 2006. It analyzed Skype and found a number of security issues with the then-current security model.<\/p>\n<\/blockquote>\n<p>Now that it&#39;s utilizing the Signal Protocol, it&#39;s <em>probably<\/em> secure &#8230; but <\/p>\n<blockquote>\n<p>On 10 November 2014, Skype scored 1 out of 7 points on the Electronic Frontier Foundation&#39;s secure messaging scorecard. Skype received a point for encryption during transit but lost points because communications are not encrypted with a key the provider doesn&#39;t have access to (i.e. the communications are not end-to-end encrypted), users can&#39;t verify contacts&#39; identities, past messages are not secure if the encryption keys are stolen (i.e. the service does not provide forward secrecy), the code is not open to independent review (i.e. the code is not open-source), the security design is not properly documented, and there has not been a recent independent security audit.<\/p>\n<\/blockquote>\n<p>Notwithstanding the claims that it supports E2E as of late 2018<\/p>\n<\/p><\/div>\n<p>April 08, 2020 at 09:52AM<br \/>\nvia reddit https:\/\/www.reddit.com\/r\/cybersecurity\/comments\/fvfcj5\/meanwhile_in_other_cyber_security_news\/fmset4m?utm_source=ifttt<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the early days of Skype when it was owned by Niklas Zennstr\u00f6m and friends, it had end to end encryption. Wikipedia (https:\/\/en.wikipedia.org\/wiki\/Skype) indicates, however: Skype was claimed initially to be a secure communication, with one of its early web pages stating &quot;highly secure with end-to-end encryption&quot;. Security services were invisible to the user, and &hellip;<br \/><a href=\"https:\/\/merikebi.warrenmyers.com\/?p=11119\" class=\"more-link pen_button pen_element_default pen_icon_arrow_double\">Continue reading <span class=\"screen-reader-text\">New comment on reddit<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4],"tags":[972],"keyring_services":[],"class_list":["post-11119","post","type-post","status-publish","format-standard","hentry","category-blih","tag-reddit"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/11119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11119"}],"version-history":[{"count":1,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/11119\/revisions"}],"predecessor-version":[{"id":11120,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/11119\/revisions\/11120"}],"wp:attachment":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11119"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11119"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11119"},{"taxonomy":"keyring_services","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fkeyring_services&post=11119"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}