Yes, China Is Spying On Skype Conversations
from the end-to-end-to-gov't-encryption dept
Remember how Skype was supposed to be "untappable" due to end-to-end encryption? Well, we've already seen that's not true, thanks to leaks that showed the German government had figured out ways to tap Skype, and it will probably come as no surprise to many that China has been tapping and storing Skype conversations. Some of the findings of this report are not new. Back in 2005, reports came out that various Chinese telecoms were investing in special "filters" for Skype that would block conversations using certain keywords. But, of course, it seemed rather obvious that if they were blocking those keywords, they would also use them to spy on what people were talking about. Besides, if the telecoms didn't filter or record Skype, the Chinese government made it clear that it would block the use of Skype altogether.The only really surprising part of the new report was the fact that the folks storing the messages did it so poorly that the researchers who discovered it were easily able to go in and read messages from others. It's rather telling to note the responses from the two companies involved. A Skype spokesperson told the Wall Street Journal: "The idea that China's government might be monitoring communications in and out of the country shouldn't surprise anyone." No, it shouldn't surprise anyone, but one might think it's rather troubling that Skype promotes itself as having end-to-end encryption, when that's clearly not true. Even more telling, the only thing about this report that seemed to actually concern representatives from Skype was the fact that the conversations had been readable by outsiders, again, telling the WSJ that the "security issue" had been "remedied" by Skype's partner in China, TOM Group. In other words, Skype isn't so concerned about users being spied on, but it is concerned when people can figure out that users are being spied on.
As for TOM Group, its response is pretty much exactly what you'd expect on this issue: "as a Chinese company, we adhere to rules and regulations in China where we operate our businesses." In other words, the government says they need to spy, so we let them spy. Nothing too surprising, but important for folks to know if they somehow thought that Skype's supposed end-to-end encryption actually kept conversations secret in China.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: china, filters, skype, spying
Companies: skype, tom group
Reader Comments
Subscribe: RSS
View by: Time | Thread
Sounds familier
Sounds a lot like the US Government's reaction when all found out about our phones being illegally tapped.
[ link to this | view in thread ]
Our Government
[ link to this | view in thread ]
China and Bush have the same position on liberty
are we talking about chinease Skype or American Telecoms here?
[ link to this | view in thread ]
[ link to this | view in thread ]
not surprised
[ link to this | view in thread ]
One more reason I don't use non-free software
[ link to this | view in thread ]
Re: Sounds familier
[ link to this | view in thread ]
I'm outraged and done with Skype.
Skype's claim that they didn't know that the spying was going on is absolutely not acceptable. If you operate an international business you need to think very carefully about your decision to do business in a blatantly oppressive country like China. If you do decide to, you need to watch your dealings there like a hawk to be sure that you are being ethical and responsible with your business.
Having failed at both of these, Skype has lost all of its credibility. They have sent a clear message to anyone who is paying attention that they value yen more over privacy, ethics, and human lives.
[ link to this | view in thread ]
A couple of clarifications
Mike - in your original post, you say 'one might think it's rather troubling that Skype promotes itself as having end-to-end encryption, when that's clearly not true'. It's important to point out that the issues referred to in the report concern only communications in which one or more parties are using TOM software to conduct instant messaging. It does not affect communications where all parties are using standard Skype software. Skype-to-Skype communications are, and always have been, completely secure and private.
mslade - you say 'Skype's claim that they didn't know that the spying was going on is absolutely not acceptable.' We've always acknowledged that TOM operates a text filter that blocks certain words in chat messages. However, it was also our understanding that it was not TOM's protocol to upload and store chat messages with those keywords, and we're now inquiring with TOM to find out why the protocol changed.
Josh Silverman, Skype's president, has posted a comprehensive statement on the Skype blog explaining where we stand currently, and what we're doing to sort things out, and I hope that it provides some clarity about the situation. Don't hesitate to get in touch directly, though - we're committed to being transparent about what's going on.
[ link to this | view in thread ]
Re: China and Bush have the same position on liberty
The way the US & the UK are going it`ll be cctv in every house if they had thier way.
[ link to this | view in thread ]
[ link to this | view in thread ]
Proprietary Security = Poor Security
It should come as no big surprise that Skype's security isn't up to scratch. They've already admitted that their protocols would never stand up to open-source scrutiny.
[ link to this | view in thread ]
Without getting too conspiracy-minded, an unscrupulous Skype employee may at present actually have the ability to use the same or similar feature on the US version for their own malicious purposes, say, trading industry secrets for $$$. This is definitely an additional risk for the Chinese-language version.
I think this is a serious enough risk that any business should consider dropping Skype's services right away.
This is a prime example of why an open source solution is superior for this kind of application.
[ link to this | view in thread ]
[ link to this | view in thread ]
Yes, China Is Spying On Skype Conversations
[ link to this | view in thread ]
Yes, China Is Spying On Skype Conversations
I don't like it but all this information they have seems to gather is either not admissible in court or be of such a technical nature that only "specialists" can understand it which means it is hard to know if justice is actually being done.
There are CCTV cameras everywhere but the image is either not of good enough quality where the individuals own mother would struggle to recognise him/her or not have a time stamp at all or in the correct format.
[ link to this | view in thread ]
Re: I'm outraged and done with Skype.
[ link to this | view in thread ]
Re: Re: China and Bush have the same position on liberty
[ link to this | view in thread ]
Bush, China, Skype, Get Arounds
Skype is doing a good job and they are smart to operate in China despite working with censorship.
It is easy to get around Tom-Skype. Check it out here: http:/www.laowise.com/blog/view/10
[ link to this | view in thread ]
chinese with Skype
[ link to this | view in thread ]