[clug] Skype Linux Reads Password and Firefox Profile

[Chris Smart]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In case some people don't read slashdot..

"Users of Skype for Linux have just found out that it reads the files
/etc/passwd, firefox profile, plugins, addons, etc, and many other
unnecessary files in /etc. This fact was originally discovered by using
AppArmor, but others have confirmed this fact using strace on versions
1.4.0.94 and 1.4.0.99. What is going on? This probably shows how
important it is to use AppArmor in any closed-source application in
Linux to restrict any undue access to your files."

http://forum.skype.com/index.php?showtopic=95261


I never trusted that software (from the makers of mega-spyware Kazaa)
and use Ekiga myself :)

- -c
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG0eovhZNk0P/rW0sRAsS2AKDvLA4ZxcAPnYwlcpbe+dWG3LOemQCgkLZZ
+SiEg6QDja6aupDqoXSERKQ=
=9sCr
-----END PGP SIGNATURE-----