Puoi avere ragione ed è innegabile, tanto quanto possono averla i ragazzi di Bugtraq e coloro/colui che ha proposto il documento riguardante le falle del sistema Skype.

Resta il fatto che buttare giù tutti i server a disposizione del noto servizio di telefonia VoIP non è cosa facile, spero ne converrai. Detto questo, noi possiamo farci davvero poco non avendo accesso alle informazioni reali e provate di quanto accaduto quel maledetto giovedì :(

credo ancor meno alla motivazione ufficiale…

e qualcuno, su Bugtraq, si è posto giustamente la domanda:

“How come this Patch Tuesday was different for Skype?

Why didn’t the last Patch Tuesday, which had the same rebooting
requirements as any other Patch Tuesday, cause the same problem with
Skype? What was different about this Patch Tuesday?”

Sarà anche lecito ma credo poco al fatto che un solo exploit riesca a tirare giù l’intera farm di Skype! :|

Skype spiega i motivi del “down” ( piuttosto forzatamente, a mio parere):
“On Thursday, 16th August 2007, the Skype peer-to-peer network became unstable and suffered a critical disruption. The disruption was triggered by a massive restart of our users’ computers across the globe within a very short timeframe as they re-booted after receiving a routine set of patches through Windows Update.

The high number of restarts affected Skype’s network resources. This caused a flood of log-in requests, which, combined with the lack of peer-to-peer network resources, prompted a chain reaction that had a critical impact.

Normally Skype’s peer-to-peer network has an inbuilt ability to self-heal, however, this event revealed a previously unseen software bug within the network resource allocation algorithm which prevented the self-healing function from working quickly. Regrettably, as a result of this disruption, Skype was unavailable to the majority of its users for approximately two days.”

precisando anche:
“We can confirm categorically that no malicious activities were attributed or that our users’ security was not, at any point, at risk.”

Però..

3 giorni prima della spiegazione ( cioè proprio Venerdi 17..), su Bugtraq compare questa mail:
“On SecurityLab.ru forum an exploit code was published by an anonymous user.
Reportedly it must have caused Skype massive disconnections today.

The PoC uses standard Skype client to call to a specific number. This call
causes denial of service of current Skype server and forces Skype to
reconnect to another server. The new server also “freezes” and so on … the
entire network.

Liks: http://www.securitylab.ru/news/301422.php

PoC: http://en.securitylab.ru/poc/301420.php”
——-
http://www.securityfocus.com/archive/1/476942/30/0/threaded

Qualche dubbio è lecito..

Riflettevo su cosa intendessero sul blog di skype con “problemi software sui nostri server”. Se è un problema software non può saltare tutta la rete dall’oggi al domani se tutto ha funzionato fino a ieri.
La risposta al quesito potr…