« March 2011 | Main | August 2011 »


June 13, 2011

Skype protocol hack could have been prevented claims StarForce

StarForce's comments come in the wake of blog postings by security researcher Efim Bushmanov who, earlier this month, claimed to have reverse engineered the Skype protocol.

"My aim is to make Skype open source," he said in a blog posting on June 3, adding links to download executable files compatible with Skype versions 1.4, 3.8, and 4.1, as well as IDA Pro disassembly database files, and - crucially, Infosecurity notes - his reverse engineered pseudo source code.

Liliya Volodina, StarForce Technologies marketing director, said that Bushmanov's took Skype's client application, disassembled the code and then worked out how the protocol plus its encryption functions operate.

"It's not clear how much time it took but it seems that the hacker was working alone", she said, adding that he is now recruiting other people holding the same views (say, other hackers) who, he says, `have enough time' to finish the project.

"Enough time is a loose concept and we can guess that he spent more than a year to disassemble the program when he worked alone. This is a good illustration of the fact that giving enough protection to a program's code may prevent its reverse-engineering for a long time, especially if the hacker doesn't know the basic principles of the protection", she explained.

Volodina went on to say that there could be tough times ahead for Skype.

In addition to the fact that the company needs to fix program instabilities, she says, it also needs to rebuild the protocol and code protection.

Source

Apple Accused of Ripping Off Developer's Rejected Wi-Fi Sync App

It's no secret that Apple has been militant in suing competitors that employ technologies even remotely close to Apple's own. But when it comes to stealing ideas for apps from developers, Apple's intentions are a bit more dubious.

The Register reports that Apple is being accused of stealing the idea of one UK-based college student and developer — Greg Hughes. In May 2010, Hughes submitted an app for consideration called Wi-Fi Sync, which allowed users to sync their iTunes libraries wirelessly.

Rather than receive the standard rejection email, Hughes reportedly got a call from an iPhone developer relations representative letting him know that his app was "admirable," but that some unspecified security concerns prevented it from being accepted. "They did say that the iPhone engineering team had looked at it and were impressed," Hughes told The Register. "They asked for my CV as well."

But rather than back down, Hughes simply submitted the app to the Cydia store, where it's sold more than 50,000 copies in a little more than a year. At $9.99 a pop, it's fair to say that Hughes made out quite nicely from his decision, though he declined to say how much he profited. 

That didn't pad the surprise that Hughes received earlier in the week, when Apple unveiled a number of key features for its upcoming iOS 5. One key feature, aptly named Wi-Fi Sync, does exactly what Hughes' rejected version did. Furthermore, Apple's icon for the app bears a striking resemblance to Hughes original design (see photo).

Source

'Web in a suitcase,' other technology, keeping rebels, dissidents connected

 
 
It's no secret that oppressive governments such as Iran's work hard to disconnect rebels and others from the Internet. What might not be known, however, is that the United States is working behind the scenes in these areas to create “shadow networks” of Internet and mobile phone systems that dissidents can use in those cases.

One such development is what is being called the so-called "Internet in a suitcase" (above), which has been funded by $2 million in State Department money via a grant to members of the New America Foundation.

One suitcase in and of itself doesn't create an Internet. Instead, a series of such devices, relying on "mesh network" technology creates an "invisible wireless web without a centralized hub." Using these devices, the transmission, whether it's voice, image, e-mail, or any data, can hop from "suitcase to suitcase," bypassing the official network.

If it sounds like sort of a series of cell phone towers, it could indeed be thought of in those terms. Aaron Kaplan, an Austrian cybersecurity expert says that he has helped set up a functioning mesh network in Vienna. He added that similar related systems have already been used in Indonesia, Venezuela, and elsewhere in the world. His work will be used as part of the suitcase project.

Source
Powered by: Dal