Voip Encryption Circumvented

[Crushdepth]

Some security researchers have found a way to circumvent encryption of VOIP services that use variable bit rate compression (eg. Skype). They can use patterns in the compression associated with pronunciation to recognise spoken phrases, with 50% accuracy (up to 90% in some cases).

Good podcast on it available at GRC (MP3, 40MB).

[TPI]

dam_n! There goes all of my drug discussions on Skype, maybe now I'll have to talk in Sioux or Apache? Like the "Windtalkers" of WWII?

[rakman]

dam_n! There goes all of my drug discussions on Skype, maybe now I'll have to talk in Sioux or Apache? Like the "Windtalkers" of WWII?

I wonder if this technique is applicable to STE phones?

http://en.wikipedia.org/wiki/Secure_Terminal_Equipment