Skype security flaw lets hackers claim ownership of account using email address [Updated]

Update: Skype has informed us that the security flaw is now resolved and that the password reset process has been updated accordingly. Check out Skype’s official statement after the break.

Skype users have something to worry about. Russian hackers found out that anyone can hack a user’s Skype account by using the email address tied to that account. When a person knows the email address of a Skype user, he or she can use that email address to create a new Skype account. Obviously Skype cannot create a new account from the email address because it’s already being used. (more…)

By Ubergizmo. Related articles: India wants to monitor Google and Skype as well, Skype for Mac OS X vulnerability fixed,

Your Skype Account Can Be Hacked Using Just Your Email Address (Updated)

The Next Web is reporting that a security hole in Skype’s password recovery tool means that your account can be hacked using just your email address and username. More »

Skype hack steals accounts with nothing more than your email

A Skype security flaw could allow rogue users to seize control of your account using nothing more than your email address, thanks to subpar recovery policies that can be easily gamed. The exploit depends on Skype’s policy of reminding new sign-ups of any existing usernames they have previously registered, when they attempt to re-register using the same email address. According to The Next Web, with a minor amount of tinkering, it’s possible to reset another user’s password and thus grab hold of their account.

Although a signed-in user will be able to see when somebody else attempts the hack, they would need to react fast in order to actually prevent themselves from being locked out. If they were not logged in at the time, or not paying sufficient attention, then they could have their Skype credentials usurped – along with any credit on that account – without them even realizing it had happened.

Skype is apparently conducting an “internal investigation” into the loophole, though for now there’s no official comment on when it might be closed off. The hack was first reported on a Russian forum roughly two months ago, it’s said, with the person responsible for discovering the exploit claiming to have told Skype about it with no apparent change in recovery security.

For the moment, the best advice is to change your registered email in the Skype settings to something that might not be associated with your account. That reduces the likelihood, though we’ll need to see a change in how accounts are handled by Skype itself before the hack is closed down for good.

Update: More complete instructions for the workaround can be found here, courtesy of Reddit:

Log in on skype.com
Go to the profile, click Edit and add an email address an attacker won’t guess. (Or your-email+something@gmail.com if you’re using Gmail)
Click Save
Click Edit again, set the new address as Primary
Click Save, enter the password and click the Enter button
Delete the old email

Update 2: Skype has given us the following statement:

“We have had reports of a new security vulnerability issue. As a precautionary step we have temporarily disabled password reset as we continue to investigate the issue further. We apologise for the inconvenience but user experience and safety is our first priority”


Skype hack steals accounts with nothing more than your email is written by Chris Davies & originally posted on SlashGear.
© 2005 – 2012, SlashGear. All right reserved.


Skype disables password reset page to deal with email-based security ‘vulnerability’ (update)

Skype disables password reset page to deal with emailbased security hole

Skype has taken down its password reset page as it deals with a password reset exploit that can give suspicious types access to your account with only your email address. The issue was first spotted on Russian forums months earlier, but TNW has since been able to replicate the same, apparently easy to reproduce, vulnerability. Before Skype withdrew its password reset page, the only way to avoid the problem was to change your email address to something unknown by anyone. According to Skype’s Heartbeat status blog, it’s now investigating the issue further.

Update: Skype has released a second statement: “Early this morning we were notified of user concerns surrounding the security of the password reset feature on our website. This issue affected some users where multiple Skype accounts were registered to the same email address.

“We suspended the password reset feature temporarily this morning as a precaution and have made updates to the password reset process today so that it is now working properly. We are reaching out to a small number of users who may have been impacted to assist as necessary.”

Filed under:

Skype disables password reset page to deal with email-based security ‘vulnerability’ (update) originally appeared on Engadget on Wed, 14 Nov 2012 05:42:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceSkype  | Email this | Comments

Skype for Windows Phone 8 preview available today

Skype announced several weeks ago that it was working on Skype for Windows Phone 8. Skype promised that the application would be fast, modern, and beautiful while delivering what users expect from Skype. Today Skype has announced the availability of an early preview version of Skype for Windows Phone 8.

The software offered in the preview will give users all of the Skype basic functions and a new and modern design. The pre-version will also allow users to check out many of the new features of Skype including the People Hub and a contact list this combined with buddies from Windows Live Messenger. Skype also says that users of the preview will receive some call a message notifications.

Those notifications will be received even when the app is closed and running in the background. The final release version of Skype for Windows Phone 8 will bring a new era on Skype on mobile according to the developers. The features that will bring this new era include making Windows Phone 8 users always reachable even when the app is closed.

Users will be able to start a chat with Skype contacts right from the People Hub and users will be able to keep up with new messages as they are received via Live Tiles. Windows Phone 8 users who want to check out the Skype for Windows 8 preview can download it via the Store right now. Those who download the preview version will receive an update on the full version is available.


Skype for Windows Phone 8 preview available today is written by Shane McGlaun & originally posted on SlashGear.
© 2005 – 2012, SlashGear. All right reserved.


Skype for Windows Phone 8 official preview available now (video)

Skype for Windows Phone 8 official preview available now

Microsoft’s rebuilt Skype app is now available to download for those early Windows Phone 8 shoppers. While we already took a tour of the new app last month, you’re now able to do the same. New features include Skype contacts within the People Hub (and access directly from there), while you’ll be able to login to the service with either your Microsoft or Skype account — no option yet to merge the two. You will be able to send messages to anyone still using Messenger, but more importantly, receive both Skype calls and chat missives even when the app is whirring in the background. Incoming call notifications will appear on screen and its very own Live Tile will then notify you of any messages (though not calls) missed.

This is still a preview of a final product, however, and some issues with incoming calls meaning it could tap into your cellular data connection even if WiFi is hooked up after the call is accepted. At the moment, incoming calls when the app is closed will only be delivered through audio, even if the other person is trying to send video. Similarly, if you exit the app during a video call, the stream will be cut short. There’s also no ability to edit your phone contacts and there’s some missing Windows Phone integration links on this early build. Hit up the source for a full list of the early drawbacks and if you’re still in, the second source will send you to the download. We’ve also added our recent hands-on video after the break.

Continue reading Skype for Windows Phone 8 official preview available now (video)

Filed under: , , ,

Skype for Windows Phone 8 official preview available now (video) originally appeared on Engadget on Mon, 12 Nov 2012 06:21:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceSkype, Windows Phone Store (Skype)  | Email this | Comments

Skype Preview for Windows Phone 8 now available

Good news Windows Phone owners, it looks like Skype for Windows Phone 8 is finally available! We guess this was only a matter of time ever since Microsoft acquired Skype, and while there was Skype for Windows Phone 7.x, we guess this is full version of the app as Microsoft had intended. In this version of Skype, and also thanks to Windows Phone 8 devices featuring the much awaited dual-core processors, full video chat will be supported, with calls from Skype coming in to your phone like a regular call. The app is also expected to run in the background and if you were worried about battery life, it seems that your online presence is being hosted in the cloud on Microsoft’s servers so you don’t have to worry about the app draining too much battery. We haven’t tested this power-saving feature out ourselves so we guess you will have to be the judge of it. However there are some minor bugs that have been reported, such as Facebook chat not being available or contacts that appear offline, but like the app description says, this is only the Preview version so there might be a couple of snags here and there. If you’d like to give it a go anyway, head on over to the Windows Phone Store for the download.

By Ubergizmo. Related articles: Angry Birds Space now available for Windows Phone 8, Skype for Windows Phone 8 preview,

Skype launches small business platform SITW

Skype has taken its “Skype in the workspace” platform, more commonly referred to as SITW, out of beta, making it available to the general public. The platform is aimed at small businesses, and provides a way to connect with clients and customers worldwide instantly. The platform was in beta for six months.

SITW is free to use, and utilizes the existing Skype network in such a way that small businesses and entrepreneurs can form connections with other businesses, as well as customers and potential partners. Users can create public invitations for offers and opportunities, which other users can then take advantage of. The two parties can then communicate over Skype, giving product demonstrations, business proposals, or similar activities. The receiving party can provide a public testimonial if they desire after it’s over.

Skype’s Head of SMB Marketing Ural Cebeci offered this statement. “With more than 280 million connected users each month, Skype offers a huge range of contacts for the small-business community. We aim to connect millions of small businesses with Skype in the workspace and believe that, by taking advantage of this shared network, businesses can develop the range of tools they need to grow, regardless of location or industry. From the designer in San Francisco looking to source textile suppliers in Thailand to the London consultant connecting with clients in Milan, the possibilities are endless.”

All you need to sign up is a regular Skype account, which you’ll use to join SITW. After logging in to your Skype account, you’ll click “Create an Opportunity” on the Skype website, where you’ll be prompted to create an SITW profile. Soon you’ll be presented with the “Create your Opportunity” screen, where you choose a demonstration length, upload a photo or video if you want, and write an information bit about your opportunity and why users should connect with you to learn more.

[via Microsoft]


Skype launches small business platform SITW is written by Brittany Hillen & originally posted on SlashGear.
© 2005 – 2012, SlashGear. All right reserved.


Skype announces new ‘In the Workspace’ platform for small businesses

Skype announces new 'In the Workplace' platform for small businesses

Skype has made itself present in many different areas around the globe, but the Microsoft-owned service is now looking to enter (and hopefully be a part of) a more business-oriented field. With the launch of its newfangled, adequately-named In the Workspace platform, Skype says it’s hoping to keep small businesses connected and help them grow by giving them a free platform where they can easily communicate with potential customers, partners and even suppliers. According to Skype, this novel service has been tested in beta form for nearly six months now, and today it’s officially opening its virtual doors to all business owners that are interested in giving it a go — the link to sign up can be found down below.

Continue reading Skype announces new ‘In the Workspace’ platform for small businesses

Filed under: , ,

Skype announces new ‘In the Workspace’ platform for small businesses originally appeared on Engadget on Thu, 08 Nov 2012 15:36:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceSkype  | Email this | Comments

Microsoft confirms its moving to Skype from Windows Live Messenger

Just yesterday we reported that Microsoft was rumored to be discontinuing Windows Live Messenger in favor of Skype. While the company’s latest 6.0 update supported that claim with integrated Windows Live Messenger account sign-in, it wasn’t until today when Microsoft officially confirmed that it would moving to Skype full-time.

Microsoft will be completely discontinuing Windows Live Messenger worldwide in early 2013, and are encouraging users to update to the latest version of Skype in order to merge their Windows Live Messenger accounts with their Skype accounts. As a part of the discontinuation process, Microsoft will merge over 100 million Messenger users to Skype.

In order to transition over to Skype, just download the latest version, then select the option to sign in with your Microsoft account on the sign in screen. You will then be asked if you’re already using Skype or are a new user. If you use Skype and Messenger already, you can merge your Skype and Messenger account into your Microsoft account.

Skype says it will assist users over the coming months to smoothly transition over from Windows Live Messenger. The move is nothing too surprising — it seemed obvious that Microsoft wanted to take advantage of its acquisition of the popular IM and video chat client. So far, it looks like Microsoft is on the right track to do that.


Microsoft confirms its moving to Skype from Windows Live Messenger is written by Craig Lloyd & originally posted on SlashGear.
© 2005 – 2012, SlashGear. All right reserved.