Skype says it was unaware of China message-logging
Politically sensitive messages such as those mentioning Falun Gong were flagged and stored on servers
IDG News Service - Skype Ltd. was unaware of a major privacy problem affecting Skype users in China, the company's president said Thursday.
In a blog post to the eBay subsidiary's corporate blog, Skype President Josh Silverman said his company had no idea that the Tom-Skype software, distributed to Skype users in China, was logging chat messages and storing them on a publicly accessible server. "It was our understanding that it was not Tom's protocol to upload and store chat messages with certain keywords," he wrote.
Tom-Skype is developed by China-based Internet service provider Tom Online.
On Wednesday, Canadian researchers published a report finding that the Tom-Skype client was storing certain text messages and user information on public servers. The data was encrypted, but the encryption key required to read the data was publicly available.
Messages that referred to politically sensitive topics such as the Falun Gong spiritual movement, Taiwan and opposition to China's ruling Communist Party were flagged and stored on the servers, the researchers said. These computers were also logging details of voice calls placed to Tom-Skype users, they said.
Like all China ISPs, Tom Online has an obligation to monitor communications, Silverman wrote. But Skype believed that the Tom-Skype software was merely filtering certain words from chat messages, not storing them on a server, he added.
"We are now inquiring with Tom to find out why the protocol changed."
Tom Online has now fixed the security problem discovered by the researchers. "We are currently addressing the wider issue of the uploading and storage of certain messages with Tom," Silverman said.
Tom Online's parent company, Tom Group Ltd., said Thursday that it complies with Chinese law.
John Ribeiro in Bangalore contributed to this story.
- Troubleshooting Common Issues in VoIP Learn more about Voice over Internet Protocol (VoIP), including common VoIP metrics used, best practices in VoIP management and tips and tricks for...
- IDG Research Survey: Are you Paying Too Much for Your NMS? Feel like you're paying too much for network monitoring? You're not alone. This survey brief summarizes findings from research recently fielded by IDG...
- 2013 Network Management Software (NMS) Buyers Guide This white paper contains an independent comparison study of six different network management solutions and provides guidance on how you can choose the...
- Rightsizing Your Network Performance Management Solution: 4 Case Studies This white paper discusses challenges encountered as organizations search for the most cost-effective network performance management solution.
- Live Webcast 5 Steps to Assuring Quality of Experience In order to align monitoring and management practices with the true demands of the business, IT professionals must expand beyond traditional comfort zones...
- Live Webcast Master the Changing SAP Landscape with Performance Management SAP landscapes are not getting simpler. Gradually, business processes that used to be contained on a single SAP system now involve a range...
- E-Signature RFP Checklist Webcast If your organization is looking to adopt e-signatures, you may be overwhelmed by the number of providers that offer seemingly similar solutions. How...
- Navigating the New Wireless Landscape Thriving in the new wireless landscape View Now>> All Networking White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!