The researchers found a way to call Skype users without them noticing. This means that a hacker can call someone and obtain their IP-address, all without being noticed. This IP-address can then be linked to a geographical location and even specific BitTorrent users.

The exploit works on a massive scale and the researchers were able to schedule hourly calls to tens of thousands of Skype users. What makes things even worse is that Skype’s privacy settings are unable to block these attacks. Attackers can contact whoever they want, whether they are listed in their contact list or not.

The researchers conducted an experiment where they tied 400 Skype users to specific downloads on BitTorrent by using publicly availably data scraped from the BitTorrent DHT network. Many of these users shared their full contact details including their full name, city and country. This combination of information can then be used for all sorts of nefarious purposes.

“We believe this could be used by various people to stalk, blackmail, or defraud Internet users in general and P2P filesharing users in particular,” Keith Ross of the Polytechnic Institute of New York University said in a comment.“These findings have real security implications for the hundreds of millions of people around the world who use VoIP or P2P file-sharing services.”

“A hacker anywhere in the world could easily track the whereabouts and file-sharing habits of a Skype user – from private citizens to celebrities and politicians – and use the information for purposes of stalking, blackmail or fraud.”

The researchers were very careful to protect the privacy of the people they targeted, but others may not be so considerate. One would expect that, because of the immense privacy implications, Skype would be eager to fix this issue but this is not the case.

“We contacted Skype almost one year ago but the attack is still effective,” researcher Stevens Le Blond told TorrentFreak. Aside from Skype some of the flaws uncovered by the researchers also affect other real-time P2P communication systems such as Google Talk and MSN Messenger.

The authors of the paper, Stevens Le Blond of the Max Planck Institute for Software Systems, Chao Zhang and Keith Ross of NYU-Poly, and Arnaud Legout and Walid Dabbous of the French research institute INRIA offer several recommendations on how the security issues can be addressed. These and other findings will be presented at the Internet Measurement Conference in Berlin next month.

Source: TorrentFreak, for the latest info on copyright, file-sharing and anonymous VPN services.

Ipoque reports in a preview of their 2007 P2P survey that BitTorrent is generating between 50-75% of all P2P traffic. P2P traffic is responsible for 50%-90% of all Internet traffic which means that BitTorrent traffic is generating somewhere between 25% and 65% of all Internet traffic.

However, there is quite a bit of regional variance in the use of P2P applications according to Ipoque: “eDonkey exhibits a regionally varying popularity with shares between 5-50% of all P2P. In certain regions, other protocols have gained a significant importance. In the Baltic States, for instance, DirectConnect has a proportion of about 30% of all P2P traffic”

Ipoque reports that all P2P traffic is still growing. Joost is not yet posing a threat to ISPs, but media streaming services and VoIP applications show significant growth. For example, Ipoque reports that Skype generates up to 2% of the overall traffic in certain networks.

It is probably good to know that this Internet traffic research is often conducted by companies that offer broadband management and optimization solutions. It is in their best interest to overestimate these figures because they design the traffic shaping applications that help ISPs to manage their precious bandwidth.

The 2007 P2P survey will be presented at Technology Review’s Emerging Technologies Conference at MIT, more details later.

Source: TorrentFreak, for the latest info on copyright, file-sharing and anonymous VPN services.