Typing 'http://:' Into a Skype Message Trashes the Installation Beyond Repair
An anonymous reader writes: A thread at the Skype community forums has brought to light a critical bug in Microsoft's Skype clients for Windows, iOS and Android: typing the incorrect URL initiator http://: into a text message on Skype will crash the client so badly that it can only be repaired by installing an older version and awaiting a fix from Microsoft. The bug does not affect OS X or the 'Metro'-style Windows clients — which means, effectively, that Mac users could kill the Skype installations on other platforms just by sending an eight-character message.
It's hardly the only thing that causes Skype to crash, and work intermittently at best, and to be fair, it actually started before Microsoft bought them.
He tried to kill me with a forklift!
Seems like turnabout is fair play!
Good job guys!!
I'm not even sure I've heard of an error condition which required a full uninstall.
I predict many people will be sending that string today. I also predict someone will attempt to charge the people sending it with criminal hacking.
Keep up the good work.
Lost at C:>. Found at C.
How does this happen? I mean, is it a parsing issue, bad programming, careless testing? How the heck does this happen?
Modern app appers app apps with apps, not luddite trash!
Apps!
How do you install an older version on iOS? I don't think you can. At least I have no idea how you would do it. Unless Apple removes the latest version from the App Store.
http://community.skype.com/t5/Windows-desktop-client/Skype-Fix-for-crashes-caused-by-bad-URL/td-p/3997463
It's been fifteen years since I as a very, very junior quality assurance engineer had to calmly walk over to the software developers that were working on communications protocols and explain to them that while their protocols (POP3 and SMTP in this case) only truly needed to meet current RFC as far as their list of implemented commands and features was concerned, they had to be able to gracefully handle any and all non-RFC data that they received, even if only to cleanly reject it with an error or to terminate the connection. Instead the implementations would crash hard, requiring the system manager on the platform to detect that they'd gone down in a ball of flames and restart them. They couldn't understand how non-RFC stuff would be sent, even to the point of not understanding how deprecated commands from previous RFCs might stil be in-practice, let alone all of the various possible reasons that either accidental garbage or intentional sending of garbage to try to break-in could be the case.
That such problems as basic as incorrectly typed URLs could break Skype is beyond understanding. This should have been sanity-checked as part of the regular process of handling a URL, and in this particular case probably simply autocorrected and attributed to user ignorance.
Do not look into laser with remaining eye.
Nuff said
"It's such a fine line between stupid and clever" -- David St. Hubbins, Spinal Tap
Is this still Slashdot? Do we still like, or report on Linux anymore?
Around about 2011 I was using the Oxygen XML Editor, and noticed that every time I performed a certain function (I don't recall which, schema validation or something) that Skype would crash. This was on OSX, prior to the current version with the dressed up UI.
If it acquires resources on instantiation like a duck, then its a shared_ptr<Duck>
http://:
If someone says that a bug trashes an application so badly that the "only" way to fix it is reinstalling the program, they are usually mistaken, at least for programs and OSes that don't rely on signed code or similar mechanisms that thwart partial repairs.
I see this bug has a fix. If it did not, you could probably make your own fix by doing a before-and-after comparison of key files and key regristry/system settings, then publish your results.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
@3.5 stripes: "It's hardly the only thing that causes Skype to crash, and work intermittently at best, and to be fair, it actually started before Microsoft bought them.
It did, where does it say that, do you have a URL to that?
Why does anyone use Skype knowing its backdoored and every thing they say and do is recorded??
Now if only I knew someone who uses Skype chat...
these are the programmers getting paid the big bucks because of their supposed skills.
People on here can whine all they want about companies not paying programmers more, but when you have situations like this it's clear why those companies aren't doing so.
We will bankrupt ourselves in the vain search for absolute security. -- Dwight D. Eisenhower
I don't understand how Skype grew to such dominance in the ip communication field while being such a bad piece of software. I've been helping users improve their computer's abysmal performance by uninstalling Skype for years.
What does Skype do better than everyone else? Why is it so popular? Is it just the network effect, or does it have actual good points to offset the bad?
"I will trust Google to 'do no evil' until the founders no longer run it." Hello Alphabet.
instead of making the rest of the world your QA team.
Hilarious. Keep up the good work guys.
http://:community.skype.com/t5/Windows-desktop-client/Critical-bug-Skype-7-4-85-102-simple-message-crush-client/td-p/3996419
edit: Slashdot seems to be auto-fixing the HREF links... damnit.
Get free satoshi (Bitcoin) and Dogecoins
Please give a warm welcome to the new 'Skype Killer' emoticon.
When someone says, "Any fool can see
For everybody crashing their iphones with a text message.
Speaking of it being crap. It's gone totally to shit recently in terms of network usage.
Time was I could make skype calls over HSPDA. These days it's impossibly bad. Anyone know a good cross platform voip system that works over 3G and supports conference calls?
Oh also, if there's a long backlog of chat messages about one time in 20, skype will basically fuck up and be unable to sync them. The solution seems to be to blow away all config data (i.e. equivalent to reinstalling) and reinstall it.
Lovely.
SJW n. One who posts facts.
I can't believe noone has brought up or compared this to the bug in the old AOL 3.x client that would end the process and effectively boot whoever you sent it to.
Sounds like the fundamental logic flaw is in automatically restoring what Skype was doing when it crashed. In this case, it if crashed once, it will do it again. I've hit that in the past when a web browser hit a bad web page that crashed it, and rebooting the browser tried to open the web page that crashed it. With browsers, opening a page usually is slow enough that you can close the page before it crashes again.
Who could have expected a "http://" string in an IM text?!?!
The install isn't broken in that sense. There are no corrupted files or registry key or anything like that. The cached conversation with the broken string in it is processed on startup.
The conversations are stored online, so you have no way to get rid of it locally. Whenever you start up Skype, it's going to download that recent conversation and process that string, hit the bug again and crash.
When skype was used as the vector for transmitting the FBI ransomware trojan a couple years ago? That is when I started telling customers to uninstall/avoid it. So they switched to even worse services like ooVoo or other adware/spyware/malware vectors
Did anyone actually read the forum? Are we going to start posting old issues with upgrading OSX Cheetah to Puma now on the front page of Slashdot? Its an XP service pack 2 issue. Way to show your stripes. or spots I guess if you are running Cheetah and have a propensity to be bitten by something like this.
BTW, just tried it. Doesn't work.
Finally a reason for me to use Skype again.
Any thoughts on why it happens to be the URL prefix that does this? Was this some attempt at incorporating web page pushes using the messenger that went horribly wrong?
Have gnu, will travel.
Don't worry, folks! It's not a bug, it's a feature!
> brats who think writing a crappy web page is the same thing as writing a desktop application.
Yeah unlike desktop developers, any decent web developer KNOWS that their code will be attacked all the time, and designs it appropriately. Unlike desktop developers who throw shit on the internet (like Skype) without considering the fact that it's accepting input from unknown sources, including malicious sources.
Oh wait, you were saying that desktop developers who have never had any reason to think about security are better somehow, weren't you?
Let's hope there are not many people piping the /. RSS feed into Skype as a way to keep an eye on our headlines.
Apple phone crashes from texting, no one cares, Skype crashes from texting, everybody loses their minds! Jeez, just call the site MacSlashdot and be done with it.
Google hangouts is what everyone is using today.
It's like skype, but without the fucked up and crashy client. And it works better. And multi-party video chat is free.
Just chrome and a google-supplied addin and you're good.. Or any smartphone.
We now know where little Bobby Tables interned last summer.
FTA: Update on June 3: Skype has fixed the bug, and in under than 24 hours no less. “We are aware of a Skype issue and have rolled out updates for all impacted products,” a Skype spokesperson told VentureBeat.
Some people die at 25 and aren't buried until 75. -Benjamin Franklin
Will I loose a few friends tonight... HELL YA!!!
Error 1201 was not enumerated but luckily someone had read the system documentation https://www.hq.nasa.gov/alsj/a...
I mean, Skype has always had troubles, but seriously simply entering http:/// causes not just a message crash, but wrecks the program! This is amazingly bad for a freshman project, much less an "enterprise" ready program from a major vendor.
Steven
What would also be nice is if they fixed the issue that all URLs are converted to hyperlinks and stop discriminating on top level domains.
I am part of a community wireless network which runs its own DNS where the top level domain is .wan
Pasting a URL into skype does not turn it into a hyperlink for the recipient like other URLs do. The recipient has to manually copy and paste the text into their browser.
The general public is Microsoft's QA team.
They started to cripple the Linux client as well; since last year it ONLY supports PulseAudio. And it natively supported pure ALSA before that, so it is a feature being removed and replaced with an inferior solution.
Luckily someone created apulse, an emulation layer that allows you to run Skype without the hentai-tentacle-monster known as PulseAudio:
https://github.com/i-rinat/apu...
The best part is how they tout the fact that "Hi there, Skype works without Pulse Audio for features like chat as well as sharing files and photos." on their blog, like anyone would use Skype for the text chat features, and that it would somehow make up for the lost functionality: http://blogs.skype.com/2014/06...
people still use skype?
... have the surname Jpg
Hm, and now I wonder why I get strange Skype messages since a week or so ;d
Cost free eBook I read (by iBook/Kobo/Amazon/ObookO/Gutenberg etc.): "The Green Odyssey" by Philip Jose Farmer.
Skype is a great mode through which we can contact our Tutors that too sitting at home but you will have a better scope if you have to learn a language that too with Experts who are Native speakers you have to only follow http://preply.com/en/french-by-skype