21–30 of 55 posts
Earlier quoted context omitted.
"decompiled code" its hard to proof for DMCA. No, situation was simple, i upload hacked skype binaries in repo for easy distribution. And this is no-no clear case for DMCA takedown. So, it happens.
What did the binary do? Someone could actually publish this via tor + torrent protocol.
Hello, I am Efim Bushmanov skype reverse engineer with first publish of original work on reversing skype client at June of 2011. And i almost done work on create open source version of "Skype Network Compatible" client. Some info about me: https://nakedsecurity.sophos.com/2011/06/03/skype-protocol-c... https://news.ycombinator.com/item?id=2611299 http://github.com/skypeopensource/ And now I need some help from commun…
This is a great idea, and I bet you could raise a lot more than 3000! Why not just put this on indiegogo or kickstarter or some other similar trusted platform instead of asking people to just paypal you money? I figure many people would feel much more comfortable that way, and you'd probably get a bunch of publicity from just being on the site. I don't understand the point of the semi-secrecy. There's almost certainl…
Are there public code hosting (gitlab?) in other countries, where the dmca does not apply? maybe something in Europe, where reverse engineering might be less strict?
The problem is, as you reverse-engineer Skype and release source code that is meant to be liberally licensed, it still could be that the code would be practically unusable, due to possible legal issues.
IANAL, but from my understanding of the law, this is even a gray area in Russia (local RE laws restrict on what you can do with the obtained knowledge, and the law's wording feels pretty vague to me), and even if legal here, an US or EU court may have a different idea.
Maybe that's not true and I'm just over-cautious, but... well... there's clean-room reverse engineering (where one engineer analyzes the product and writes comprehensive documentation suite and another, completely unrelated person, reads the documentation and writes actual code) for a reason.
I've been working on a JavaScript API for Skype, https://github.com/oskarer/skype-js , utilizing the same endpoints as web.skype.com. Features currently working are login, receive and send messages. I have little time to work on it but it definitely shows potential.
However, one big issue I forsee is issues with Skype changing their API/protocol and completely breaking the open source alternative. Updating would require a constant stream of development work which, if past projects of this type are anything to judge by, may be difficult or impossible to supply.
However, one big issue I forsee is issues with Skype changing their API/protocol and completely breaking the open source alternative. Updating would require a constant stream of development work which, if past projects of this type are anything to judge by, may be difficult or impossible to supply.
Have you discussed this with a laywer? The problem is, as you reverse-engineer Skype and release source code that is meant to be liberally licensed, it still could be that the code would be practically unusable, due to possible legal issues. IANAL, but from my understanding of the law, this is even a gray area in Russia (local RE laws restrict on what you can do with the obtained knowledge, and the law's wording feel…
Also, the ToS for Skype may forbid the use of inofficial clients, and users using these might be locked out of the service if Skype finds out and cares.
Besides, this reverse engineering work should be simpler now that Skype was bought by Microsoft. For example, Microsoft no longer encrypts/destroys the executable's import table. And it seems they dumped the anti-debugger code too.
Let's also not forget Microsoft is pushing out new variants that should lend themselves to reverse engineering (e.g. web/plugin-free [0] and Universal Windows Platform [1] apps).
---
[0] https://support.skype.com/en/faq/FA12316/what-is-the-skype-w...
[1] http://blogs.skype.com/2016/03/24/skype-universal-windows-pl...
So, I'd love to help but... there's nothing to show after initial work in 2011. And I found no plans to provide any updates. Besides, this reverse engineering work should be simpler now that Skype was bought by Microsoft. For example, Microsoft no longer encrypts/destroys the executable's import table. And it seems they dumped the anti-debugger code too. Let's also not forget Microsoft is pushing out new variants tha…
You are clean right. But for now, we have worked:
1) login (get auth credentials)
2) get contact list
3) find vcard of the given user
4) do relay connect for it
5) send or recv message from it
Its buggy for some reasons, but its worked.
However, yes, its not released an its not public, to not ruin my work until release date.
Hello, I am Efim Bushmanov skype reverse engineer with first publish of original work on reversing skype client at June of 2011. And i almost done work on create open source version of "Skype Network Compatible" client. Some info about me: https://nakedsecurity.sophos.com/2011/06/03/skype-protocol-c... https://news.ycombinator.com/item?id=2611299 http://github.com/skypeopensource/ And now I need some help from commun…
This is a great idea, and I bet you could raise a lot more than 3000! Why not just put this on indiegogo or kickstarter or some other similar trusted platform instead of asking people to just paypal you money? I figure many people would feel much more comfortable that way, and you'd probably get a bunch of publicity from just being on the site. I don't understand the point of the semi-secrecy. There's almost certainl…
I just dont sure, which is will ok with this kind of projects...