From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 9D6FD13838B for ; Wed, 10 Sep 2014 05:50:02 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 50CF1E08F2; Wed, 10 Sep 2014 05:49:58 +0000 (UTC) Received: from smtpq2.gn.mail.iss.as9143.net (smtpq2.gn.mail.iss.as9143.net [212.54.34.165]) by pigeon.gentoo.org (Postfix) with ESMTP id 5640BE084C for ; Wed, 10 Sep 2014 05:49:57 +0000 (UTC) Received: from [212.54.34.136] (helo=smtp5.gn.mail.iss.as9143.net) by smtpq2.gn.mail.iss.as9143.net with esmtp (Exim 4.71) (envelope-from ) id 1XRamy-0007sW-Ml for gentoo-dev@lists.gentoo.org; Wed, 10 Sep 2014 07:49:56 +0200 Received: from 53579160.cm-6-8c.dynamic.ziggo.nl ([83.87.145.96] helo=data.antarean.org) by smtp5.gn.mail.iss.as9143.net with esmtp (Exim 4.71) (envelope-from ) id 1XRamy-0006pM-2G for gentoo-dev@lists.gentoo.org; Wed, 10 Sep 2014 07:49:56 +0200 Received: from andromeda.localnet (unknown [10.20.13.51]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by data.antarean.org (Postfix) with ESMTPSA id A3FBA4B for ; Wed, 10 Sep 2014 07:49:43 +0200 (CEST) From: "J. Roeleveld" To: gentoo-dev@lists.gentoo.org Subject: OT - My last one to this thread - Skype + Tox - Re: [gentoo-dev] Re: maintainer-needed@ packages need you! Date: Wed, 10 Sep 2014 07:50:05 +0200 Message-ID: <4950836.bpuD9oAckg@andromeda> Organization: Antarean User-Agent: KMail/4.12.5 (Linux/3.14.14-gentoo; KDE/4.12.5; x86_64; ; ) In-Reply-To: <20140909205941.5a858c064cceb555c487788d@gmail.com> References: <20140830134620.4feb301d@pomiot.lan> <3408222.7yEi7SS1fO@andromeda> <20140909205941.5a858c064cceb555c487788d@gmail.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-Ziggo-spambar: ---- X-Ziggo-spamscore: -4.9 X-Ziggo-spamreport: ALL_TRUSTED=-1,BAYES_00=-1.9,PROLO_TRUST_RDNS=-3,RDNS_DYNAMIC=0.982 X-Ziggo-Spam-Status: No X-Spam-Status: No X-Spam-Flag: No X-Archives-Salt: 8bd9883c-8c83-404c-b465-4ebfc508e972 X-Archives-Hash: 5ef0c964fb4b7f9f3149e8a43a0b90d4 On Tuesday, September 09, 2014 08:59:41 PM Andrew Savchenko wrote: My last response to this, as it is getting too OT > Hello, > > On Sun, 07 Sep 2014 17:51:46 +0200 J. Roeleveld wrote: > > It probably works, provided all your contacts also use it. > > As long as the vast majority of my contacts use Skype and Yahoo, I will > > not > > be able to switch. If Kopete (and other generic IM clients) would add > > support for tox, then it would be easier. > > There is a tox plugin for pidgin in tox-overlay. That's nice for pidgin users. When others follow, uptake will be easier. > > Which trojan injection are you talking about? > > I'm talking about the following research: > https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact > =8&ved=0CB4QFjAA&url=https%3A%2F%2Fwww.blackhat.com%2Fpresentations%2Fbh-eur > ope-06%2Fbh-eu-06-biondi%2Fbh-eu-06-biondi-up.pdf&ei=9jAPVJH1AafnygOOiIHgDg& > usg=AFQjCNHeILDYY4k-nUUw8vPmUCJ86Eywbg&bvm=bv.74649129,d.bGQ > > Of course, skype protocol was likely changed since that time, but I > really doubt that functionality for remote execution of arbitrary > code was removed. That research was from 2006. Over 8 years ago. Do you avoid using Bind because of all the security bugs it had in 2006? What about OpenSSL, that one had a big one not too long ago. And I'm sure I can find plenty of exploits for the Linux kernel based on the versions in use in 2006. The Skype protocol has changed a lot over the years and older versions of the protocol have been deprecated and removed. If it is still in there, I'm certain it would be known, considering the amount of people using Skype these days. -- Joost