Yes, China Is Spying On Skype Conversations

from the end-to-end-to-gov't-encryption dept

Remember how Skype was supposed to be "untappable" due to end-to-end encryption? Well, we've already seen that's not true, thanks to leaks that showed the German government had figured out ways to tap Skype, and it will probably come as no surprise to many that China has been tapping and storing Skype conversations. Some of the findings of this report are not new. Back in 2005, reports came out that various Chinese telecoms were investing in special "filters" for Skype that would block conversations using certain keywords. But, of course, it seemed rather obvious that if they were blocking those keywords, they would also use them to spy on what people were talking about. Besides, if the telecoms didn't filter or record Skype, the Chinese government made it clear that it would block the use of Skype altogether.

The only really surprising part of the new report was the fact that the folks storing the messages did it so poorly that the researchers who discovered it were easily able to go in and read messages from others. It's rather telling to note the responses from the two companies involved. A Skype spokesperson told the Wall Street Journal: "The idea that China's government might be monitoring communications in and out of the country shouldn't surprise anyone." No, it shouldn't surprise anyone, but one might think it's rather troubling that Skype promotes itself as having end-to-end encryption, when that's clearly not true. Even more telling, the only thing about this report that seemed to actually concern representatives from Skype was the fact that the conversations had been readable by outsiders, again, telling the WSJ that the "security issue" had been "remedied" by Skype's partner in China, TOM Group. In other words, Skype isn't so concerned about users being spied on, but it is concerned when people can figure out that users are being spied on.

As for TOM Group, its response is pretty much exactly what you'd expect on this issue: "as a Chinese company, we adhere to rules and regulations in China where we operate our businesses." In other words, the government says they need to spy, so we let them spy. Nothing too surprising, but important for folks to know if they somehow thought that Skype's supposed end-to-end encryption actually kept conversations secret in China.
Hide this

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: china, filters, skype, spying
Companies: skype, tom group


Reader Comments

Subscribe: RSS

View by: Time | Thread


  • identicon
    Anony, 2 Oct 2008 @ 11:06am

    Sounds familier

    In other words, Skype isn't so concerned about users being spied on, but it is concerned when people can figure out that users are being spied on.

    Sounds a lot like the US Government's reaction when all found out about our phones being illegally tapped.

    link to this | view in chronology ]

    • identicon
      guy one, 2 Oct 2008 @ 1:38pm

      Re: Sounds familier

      dont worry Anony. Your not important enough for the gov. to tap your phone

      link to this | view in chronology ]

  • identicon
    Chuck Norris' Enemy (deceased), 2 Oct 2008 @ 11:11am

    Our Government

    We can only assume that all nations who have any surveillance of their populace are employing the "tap" also. When confronted with this, will they deny or state the truth? As in the Skype "block", that makes no sense. The best way to keep track of dissenters is to know how and what they are communicating.

    link to this | view in chronology ]

  • identicon
    J.Locke, 2 Oct 2008 @ 11:34am

    China and Bush have the same position on liberty

    "In other words, the government says they need to spy, so we let them spy"

    are we talking about chinease Skype or American Telecoms here?

    link to this | view in chronology ]

    • identicon
      looney, 2 Oct 2008 @ 2:56pm

      Re: China and Bush have the same position on liberty

      do you really need to ask ?

      The way the US & the UK are going it`ll be cctv in every house if they had thier way.

      link to this | view in chronology ]

      • identicon
        thereom4, 10 Nov 2008 @ 8:58am

        Re: Re: China and Bush have the same position on liberty

        sounds like 1984. Telescreens anyone?

        link to this | view in chronology ]

  • identicon
    Anonymous Coward, 2 Oct 2008 @ 11:43am

    Information yearns to be free right?

    link to this | view in chronology ]

  • identicon
    Jake, 2 Oct 2008 @ 12:36pm

    not surprised

    i talk to my fiance in china using skype and didnt think about they spying...but not really surprised. i figure its probably happening any way i communicate with her. just gotta remember not to say "revolution"!

    link to this | view in chronology ]

  • identicon
    zcat, 2 Oct 2008 @ 1:05pm

    One more reason I don't use non-free software

    I'm pretty certain that WengoPhone (now called QuteCom) and Pidgin don't have any secret backdoors.

    link to this | view in chronology ]

  • identicon
    mslade, 2 Oct 2008 @ 1:49pm

    I'm outraged and done with Skype.

    I currently use Skype, but no longer. I remember a time when it wasn't common knowledge that every Office document had identification information embedded in it, and Chinese activitists were using Office to disseminate information for their cause. When China found out how to track this information, it led to the death of a handful of these activits. As an American I can get angry when I find out I'm being spied on, but it's not likely to lead to my incarceration (unless I'm doing something illegal) or death.

    Skype's claim that they didn't know that the spying was going on is absolutely not acceptable. If you operate an international business you need to think very carefully about your decision to do business in a blatantly oppressive country like China. If you do decide to, you need to watch your dealings there like a hawk to be sure that you are being ethical and responsible with your business.

    Having failed at both of these, Skype has lost all of its credibility. They have sent a clear message to anyone who is paying attention that they value yen more over privacy, ethics, and human lives.

    link to this | view in chronology ]

    • identicon
      Anonymous Coward, 7 Oct 2008 @ 6:46am

      Re: I'm outraged and done with Skype.

      They have sent a clear message to anyone who is paying attention that they value yen more over privacy, ethics, and human lives. What do they care about Japan's money?

      link to this | view in chronology ]

  • identicon
    Peter Parkes (Skype Blogger), 2 Oct 2008 @ 2:46pm

    A couple of clarifications

    Mike - in your original post, you say 'one might think it's rather troubling that Skype promotes itself as having end-to-end encryption, when that's clearly not true'. It's important to point out that the issues referred to in the report concern only communications in which one or more parties are using TOM software to conduct instant messaging. It does not affect communications where all parties are using standard Skype software. Skype-to-Skype communications are, and always have been, completely secure and private.

    mslade - you say 'Skype's claim that they didn't know that the spying was going on is absolutely not acceptable.' We've always acknowledged that TOM operates a text filter that blocks certain words in chat messages. However, it was also our understanding that it was not TOM's protocol to upload and store chat messages with those keywords, and we're now inquiring with TOM to find out why the protocol changed.

    Josh Silverman, Skype's president, has posted a comprehensive statement on the Skype blog explaining where we stand currently, and what we're doing to sort things out, and I hope that it provides some clarity about the situation. Don't hesitate to get in touch directly, though - we're committed to being transparent about what's going on.

    link to this | view in chronology ]

  • identicon
    Nick Stamoulis, 2 Oct 2008 @ 3:15pm

    Always fun to be spied on. Guess Chinese residents can opt for another messenger or are they all easily tapped?

    link to this | view in chronology ]

  • identicon
    Lawrence D'Oliveiro, 2 Oct 2008 @ 6:43pm

    Proprietary Security = Poor Security

    It should come as no big surprise that Skype's security isn't up to scratch. They've already admitted that their protocols would never stand up to open-source scrutiny.

    link to this | view in chronology ]

  • identicon
    S. E. W., 2 Oct 2008 @ 6:45pm

    If the Chinese-language version scans messages up front (pre-encryption) for certain keywords and uploads such messages to their Chinese servers, it's complately within reason to suspect that other versions do this too, especially given that US government engaged in pretty much the same behavior as the Chinese did, when it demanded that US telecoms scan e-mail.

    Without getting too conspiracy-minded, an unscrupulous Skype employee may at present actually have the ability to use the same or similar feature on the US version for their own malicious purposes, say, trading industry secrets for $$$. This is definitely an additional risk for the Chinese-language version.

    I think this is a serious enough risk that any business should consider dropping Skype's services right away.

    This is a prime example of why an open source solution is superior for this kind of application.

    link to this | view in chronology ]

  • identicon
    Peter Parkes (Skype Blogger), 3 Oct 2008 @ 1:33am

    Lawrence D'Oliveiro and S. E. W. - just to reiterate; we have the utmost confidence in Skype's security. As I said above, Skype-to-Skype communications (with standard versions of Skype) are, and always have been, completely secure and private.

    link to this | view in chronology ]

  • identicon
    Ppitstop, 3 Oct 2008 @ 3:53am

    Yes, China Is Spying On Skype Conversations

    Personally if I had something to say that was that secret I doubt I would do it via Skype.

    link to this | view in chronology ]

  • identicon
    Scott Lithgow, 3 Oct 2008 @ 4:01am

    Yes, China Is Spying On Skype Conversations

    Here in the UK our present government has gone spying mad unfortunately it is on us the British Citizen.

    I don't like it but all this information they have seems to gather is either not admissible in court or be of such a technical nature that only "specialists" can understand it which means it is hard to know if justice is actually being done.

    There are CCTV cameras everywhere but the image is either not of good enough quality where the individuals own mother would struggle to recognise him/her or not have a time stamp at all or in the correct format.

    link to this | view in chronology ]

  • identicon
    Leumas, 28 May 2009 @ 9:16pm

    Bush, China, Skype, Get Arounds

    The policies of the Bush administration and those of the Chinese government are similar and that is probably why they connected so well.

    Skype is doing a good job and they are smart to operate in China despite working with censorship.

    It is easy to get around Tom-Skype. Check it out here: http:/www.laowise.com/blog/view/10

    link to this | view in chronology ]

  • identicon
    Deepika, 12 Jan 2015 @ 2:01am

    chinese with Skype

    Hey..Thanks for the post.You can try Chinese with Skype,there is no offense.Chinese govt is working on this just for safety purpose http://preply.com/en/chinese-by-skype

    link to this | view in chronology ]


Follow Techdirt
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Discord

The latest chatter on the Techdirt Insider Discord channel...

Loading...
Recent Stories

This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it
Close

Email This

This feature is only available to registered users. Register or sign in to use it.