Showing posts with label gfw. Show all posts
Showing posts with label gfw. Show all posts

26.8.09

Chinese version of GTalk is NOT encrypted!

My friend just told me that the Chinese version of Google Talk is NOT encrypted, while the English version is encrypted. As shown below, when using the Chinese version, the message (in the red circle) is not encrypted at all! One thing you should know is that the Chinese version is higher than the English version, which suggests Google might remove the encryption on purpose. It reminds me of the shit of TOM-Skype, which watches the text conversation of users.

Here goes the screen shot of the Chinese version (1.0.0.105), and you can see the text transmitted unencrypted at all:


Here goes the screen shot of the English version (1.0.0.104), which is obviously encrypted using TLS 1.0 as the first 3 bytes are 0×17 0×03 0×01:


3.10.08

You’re watched on TOM-Skype

Security experts from University of Toronto Citizen Lab report that TOM-Skype, Skype’s China venture with TOM, text messages sent between TOM-Skype users and between Skype users and TOM-Skype users, are scanned for phrases like “Taiwan independence” or “Falun Gong” or for opposition to the Communist Party of China. When these keywords are found, the messages and information, such as usernames of subscribers, are stored on publicly accessible Web servers along with an encryption key that could be used to unlock the data.

Jennifer Caukin, a spokewoman of Skype admitted the breach.