Re: Skype & IPS vendor claims

[Christian Kreibich <christian () whoop org>]

Hi,

check out this presentation for more details on Skype's internals than
most people can grok:

  http://tinyurl.com/rmjzz

I've mirrored it here since that link is sometimes slow:

  http://www.cl.cam.ac.uk/~cpk25/outback/blackhat-eads-skype.pdf

On Wed, 2006-05-17 at 11:06 -0400, ROB DIXON wrote:
> Has anyone, tried to connect and run ethereal to see where it is
> connecting? Does it change everytime?
>
> Unless the client updates its connection info everytime, in preparation
> for the next login, wouldn't the client always connect to the same host
> name or IP for the initial login?
>
> Does Skype own a block of public Ips? Block em all :-)
>
> I may be off track here. My wife tells me that all the time ;-)

Cheers,
Christian.
-- 
________________________________________________________________________
                                          http://www.cl.cam.ac.uk/~cpk25
                                                    http://www.whoop.org


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------