Announcement

Collapse
No announcement yet.

Skype on the Lan - is it a security threat?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Skype on the Lan - is it a security threat?

    we want to start working with Skype in our company as a communication tool. i read in some articles that skype is a security threat and has a lot of vulnerabilites (bufferoverflow for example).

    how can i defend my lan and still work with skype, is the any security tool or method to work with?

    thanks

    Yoav Shimon

  • #2
    Re: Skype on the Lan - is it a security threat?

    sure, don't implement Skype.

    Skype has indeed quite a lot of security leaks. No other then skype can or will fix those issues.
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: Skype on the Lan - is it a security threat?

      that's the answer i gave to my C.E.O, but i have to find a way to implemet skype and still be secured.

      Comment


      • #4
        Re: Skype on the Lan - is it a security threat?

        well kicks his ass! (I love kicking CEO's asses )

        Ok seriously: let him read on this:
        http://www.silicon.com/research/spec...9166609,00.htm
        Marcel
        Technical Consultant
        Netherlands
        http://www.phetios.com
        http://blog.nessus.nl

        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
        "No matter how secure, there is always the human factor."

        "Enjoy life today, tomorrow may never come."
        "If you're going through hell, keep going. ~Winston Churchill"

        Comment


        • #5
          Re: Skype on the Lan - is it a security threat?

          I'm with Marcel - I would suggest using an alternative messaging client as there is no way to protect a system from insecure software without changing that software.


          Tom
          For my own and your protection, I do not provide support by private message under any circumstances. All such messages will be deleted and ignored.

          Anything you say will be misquoted and used against you

          Comment


          • #6
            Re: Skype on the Lan - is it a security threat?

            What about putting Skype on a seperate VLAN and keep it separate from the work network. Don't know if that is possible, just trying to think outside the square.
            1 1 was a racehorse.
            2 2 was 1 2.
            1 1 1 1 race 1 day,
            2 2 1 1 2

            Comment


            • #7
              Re: Skype on the Lan - is it a security threat?

              So you need additional client's on a seperate vlan to let them talk via skype?
              Quite expensive for such a application.

              Personally I would put a Cisco or Alcatel for the VOIP traffic.
              Last edited by Dumber; 7th February 2008, 10:58.
              Marcel
              Technical Consultant
              Netherlands
              http://www.phetios.com
              http://blog.nessus.nl

              MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
              "No matter how secure, there is always the human factor."

              "Enjoy life today, tomorrow may never come."
              "If you're going through hell, keep going. ~Winston Churchill"

              Comment


              • #8
                Re: Skype on the Lan - is it a security threat?

                kick CEO's ass.Yea yea.Do that plz plz.They ppl dn't understand anything and just push us to do things.But if that cause any problem thy'll kick our ass.

                Comment


                • #9
                  Re: Skype on the Lan - is it a security threat?

                  well, i thought about it, bbut he's the man who sign my paycheck, so that's kind of kicking myself.
                  I try to get an answer in some more forums (and got almost the same answer), no one know's a method of defending against skype security threats.

                  skype finds all the security threats, and fix them. but (it's a big but).. they dont have a mechanizm for updating the software, so they issue a version (and there has to be someone who check the skype site dayly for version updates).

                  until skype will find all the security threats, we'll all be old man.

                  if i'll find something cheerfull in the subject, i'll update you all.

                  in the meantime - "no skype for you, come back one year."

                  Comment


                  • #10
                    Re: Skype on the Lan - is it a security threat?

                    So you didn't trust us

                    Did you still need to implement Skype?
                    Let the CEO sign that you implement it against you're advice and that it is on his own risk.
                    Marcel
                    Technical Consultant
                    Netherlands
                    http://www.phetios.com
                    http://blog.nessus.nl

                    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                    "No matter how secure, there is always the human factor."

                    "Enjoy life today, tomorrow may never come."
                    "If you're going through hell, keep going. ~Winston Churchill"

                    Comment


                    • #11
                      Re: Skype on the Lan - is it a security threat?

                      Originally posted by yoav30 View Post
                      we want to start working with Skype in our company as a communication tool
                      WHY do you want to use skype exactly? Is it just for IM, or VOIP, or what?

                      The more info we have, the better the possibility that we can suggest an alternate solution.
                      ** Remember to give credit where credit is due and leave reputation points where appropriate **

                      Comment


                      • #12
                        Re: Skype on the Lan - is it a security threat?

                        just checking...

                        Comment

                        Working...
                        X