News for hackers. Stuff that matters.
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by andwur on Sunday September 04, 2016 @05:14AM (#12423481)
I haven't spent much time browsing through the source but the code quality and security is pretty dismal so far. Not to mention the confusing project structure.

Magic numbers, ... and strings, all over the place [0]. Memory leak galore (debug code?) [1]. Probably buffer overflows all over the place, here's one I noticed [2]. I suspect others given the proliferation of opaque pointers and memcpy usage.

[0] https://github.com/skypeopensource/skypeopensource2/blob/mas...

[1] https://github.com/skypeopensource/skypeopensource2/blob/mas...

[2] https://github.com/skypeopensource/skypeopensource2/blob/mas...

Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by viraptor on Sunday September 04, 2016 @06:47AM (#12423714)
The magic values look ok to me. I mean, some values are known, some aren't - it's still early days. Hopefully more will be labeled / split up into components with time.

But I agree that it would be dangerous to use now. And the author isn't a skilled VCS user or open source dev either. (comments say all rights reserved)

Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by fulafel on Sunday September 04, 2016 @08:32AM (#12423995)
"all rights reserved" doesn't conflict with openness, it's a (now obsolete) technicality meaning you opt in to getting your copyright license enforced under an international treaty.
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by viraptor on Sunday September 04, 2016 @12:38PM (#12425255)
I meant the whole block not just this phrase. "Copyright (c) 2009 by VEST Corporation. All rights reserved. Strictly Confidential!" - that conflicts with openness. Or at least with assigning rights to other people.
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by fungos on Sunday September 04, 2016 @09:25AM (#12424205)
To me this project looks like really a just reversed and mostly functional one and this is the quality of said projects, I've been there. He has disassembled, transcribed to a C project almost as-is and made it compile.

The developer may not have enough development experience to organize it decently or just rushed it online because of anxiety.

Anyway, very good resource for others if there still any interest at all at Skype compatibility or else, only missing the .idb with renamed subs and comments. :)

Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by fungos on Sunday September 04, 2016 @11:29AM (#12424825)
Old patched binaries and .idb are on his onion: http://gzscxpillagce2gf.onion/
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by sillysaurus3 on Sunday September 04, 2016 @05:41AM (#12423550)
"How dare you show your project when it has flaws!"
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by andwur on Sunday September 04, 2016 @06:19AM (#12423660)
"How dare you comment on the flaws found in someone's project!"

If issues are never brought to light then it's very unlikely they will ever be fixed. Would you rather everyone just stayed silent?

I have great respect for someone that can put in the time and effort to reverse engineer Skype, and brave Microsoft's legal team in doing so, but in its current state this code can't be used safely and is far from easy to understand either.

Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by EvgeniyZh on Sunday September 04, 2016 @06:46AM (#12423713)
I believe that the best way to bring issues to light is pull request. Second best is the issue. Comment on Hacker News is somewhere down the list
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by adekok on Sunday September 04, 2016 @09:51AM (#12424302)
A technical review of code isn't a personal attack. Please learn to tell the difference.
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by showmustgoon on Sunday September 04, 2016 @08:32AM (#12423994)
If these flaws are minor or inconsequential, then you might be right about your remark but if these flaws are flagrant or critical, then the OP had the right attitude to make concerns public.
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by mSparks on Sunday September 04, 2016 @05:52AM (#12423580)
You sound like you expect something different from reversed Microsoft code.
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by amelius on Sunday September 04, 2016 @06:09AM (#12423627)
I know you are probably joking, but didn't MS buy the code?
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by extra88 on Sunday September 04, 2016 @09:18AM (#12424177)
Yes, Microsoft bought Skype, it didn't create Skype. There have been many substantive changes since then (e.g. much less peer-to-peer in operation).
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by pbhjpbhj on Sunday September 04, 2016 @04:16PM (#12426492)
Is there any peer-to-peer now, I thought they routed everything through their own servers now?
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by extra88 on Sunday September 04, 2016 @04:53PM (#12426663)
I don't know. It seems stupid to entirely drop peer-to-peer but maybe that's the case now.
Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by mSparks on Monday September 05, 2016 @08:23AM (#12429766)
only "stupid" if you are opposed to this:

http://techrights.org/2015/01/02/snowden-leaks-on-spying/

Otherwise, dropping peer to peer is the only way to achieve the projects goals.

Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by 0xmohit on Sunday September 04, 2016 @08:01AM (#12423901)
You didn't mention the inconsistent (and somewhat weird) formatting of the source code.

https://github.com/skypeopensource/skypeopensource2/blob/mas...

https://github.com/skypeopensource/skypeopensource2/blob/mas...

I cannot specify more examples.

Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by Retr0spectrum on Sunday September 04, 2016 @08:27AM (#12423979)
I think part of it is caused by the tab-width setting. The developer appears to have been using a tab-width of 4, and there are some instances where they used spaces for indentation without realising.

The only explains some of the wierdness though. That second link is completely inexplicable.

Re:Skypeopensource2 – Skype client based on reversing Skype 5.5 by skypeopensource on Sunday September 04, 2016 @09:36AM (#12424240)
Yes :-)