Is Skype really secure ???

[L4yer Cak3]

After reading about Skype I decided to download it due to its on the fly encryption, Now having downloaded the latest ver 1.2.0.48 I have noticed that it saves a load of .dbb files from Chat.dbb, Voicemail.dbb and user.dbb even after selecting not to save chat history.

I dont know if any one else as noticed this or if its a bug but I find this quite a huge security flaw if you wish to protect your privacy as .dbb files can be read using Encase or by some hex editors. :coffee:

[Spennyboy]

have you looked and checked the files to see if they are actually storing chat history?

or just making a general assumption?

i will look into this further.

[L4yer Cak3]

Its really an assumption, I've not tested it yet fully with Encase but after selecting not to save history and talking to a friend, I later switched to save history for 2 weeks and after checking the chat history, it recovered the whole conversation even though before I had it set not to save chat history

[Spennyboy]

Skype does do a 'temp' save of convo.

this is so when you close a window with someone, unlike msn you loose the whole conversation, skype stores it so when you reopen it the previous chat is there...

im not 100% on how long it last but i have been chatting to a few members on here and when i have open the chat it has said 'messages in this convo ate x hours old'

hmmm.

[unclex]

the encryption does work - tested

[L4yer Cak3]

Unclex what tests did you do ?

i'm still not sure how to use Encase, especially for recovering this type of data. it must be storing it somewhere though in these *.dbb files. I can recover messages even if I have "save history" turned off

I can chat all day with history turned off and as soon as I switch history back on I can view my entire conversation through out all of the day

[Fusen]

Skype does do a 'temp' save of convo.

this is so when you close a window with someone, unlike msn you loose the whole conversation, skype stores it so when you reopen it the previous chat is there...

just letting you know but msn 7 does do this