Global exposure of skype passwords leads to chat interception...

I have never trusted any of those plugins attached to skype, especially not the ones made by one or two man companies (that are sitting in the skype extra's manager...).

And now this story about Iskoot exposing your skype password.

Dan York from Disruptive Conversations has a go at it (such stories will only come from the bloggers community around Skype, not from Skype security, Marketing or PR. Same can be said about Iskoot. Maybe the 3 monkeys PR of Skype will clean up the mess... here goes : "using iSkoot from their mobile over WiFi is effectively allowing their Skype credentials to be seen by anyone who can intercept their traffic (i.e. is either on the local WiFi network or is between them and iSkoot’s servers). Yes, Skype chats can also be intercepted" source.

I wonder how the guys from the 3 skype phone have solved such matters...

Related :  iSkoot Transmits Your Data In The Clear

My take : image you are company using skype and iskoot or other things that link skype via your devices to your communications...  It's always the same story... Don't connect anything that you can't trust...

All the above was raised before here.See the image that I found on Phil Wolf his flickr.com account. Nothing new under the sun.

  dump of iSkoot passing Skype login credentials in the clear 
  Originally uploaded by PhilWolff

Furthermore, my advice would be (unless you manage everything yourself) to try to stay away from companies that do not support their business users. There is currently no special service level for "big customers". In the world of skype everybody is treated at the same level. Meaning : virtually no support. Good luck.

By the way how can something like  iSkoot which is Skype Certified still suffer from such issues." I hope that the Skype certification refers to more than just the result of lobbying, politics or basically expands skype's marketing power and user platform. See what you get now.

See also the skype dual and triple login without notification. It is still there, and it is there for a reason...

source image.

More about Iskoot and what I found out earlier... I remember that these issues were raised before...