Slashdot Mirror
Bavarian Police Seeking Skype Trojan Informant
Andreaskem writes "Bavarian police searched the home of the spokesman for the German Pirate Party (Piratenpartei Deutschland) looking for an informant who leaked information about a government Trojan used to eavesdrop on Skype conversations. (The link is a Google translation of the German original.) There is a high probability that the Trojan is used illegally. A criminal law specialist said, 'The Bavarian authorities worked on the Trojan without a legitimate basis and now try to silence critics.' The informant need not worry since 'every information that could be used to identify him' is protected against unauthorized access by strong encryption. The Trojan is supposedly capable of eavesdropping on Skype conversations and obtaining technical details of the Skype client being used. It is deployed by e-mail or in place by the police. A Pirate Party spokesman said, 'Some of our officials seem to want to install the Big Brother state without the knowledge of the public.'"
I can remember a debate I had a while back about the potential of some cheap wifi tech hooked up to a small webcam and worn on your person when going to protests or other events where you expect there to be a high chance of the police breaking the law. So that it could stream everything you see directly to a secure online store.
This would have great potential for making sure police who abuse their power get in trouble or are at least publicly shown to be abusing their power.
My friends rebuttal was that they'd simply introduce a law banning private citizens from using such devices at protests and call it a measure against pedophiles (to stop them filming the little kids walking around in the streets! You never know what they'd be thinking about if they had video of your children walking on a public street!!!).
As long as people will accept anything in the name of fighting terrorists or paedophiles then civil liberties are fucked.
Posting Anonymously to protect my job,
I have been working for a few months on software designed to extract skype calls from streams of captured packets. The software is highly distributed, and while I can't know the exact use, I'm guessing it will be installed near every network interconnect point. Interestingly, it has nowehere near the performance required to record every skype call on the internet, so it will probably only be used for certain targets.
The good news is that the project is failing badly due to funding issues and poor management, and probably won't be deployed for years yet.
Note that this IS with the help of skype engineers - we haven't reverse engineered the encryption.