Should businesses ban Skype?

Or is it enough to police usage?

NEWS

Though Skype has proved quite popular - with more than 50 million registered users - scepticism persists over whether the voice over IP application is safe for businesses.

Now one analyst firm is calling for enterprises to ban Skype - or at least take steps to ensure it's secured.

Skype has several shortcomings in the enterprise setting, according to Canadian analyst firm Info-Tech Research Group, which has published a research note titled Five Reasons to Ban Skype.

These reasons include Skype's ability to bypass corporate firewalls; basic technical vulnerabilities which leave it open to hacker attacks despite encrypting communications; and the burden of tracking and storing all user communications with the software.

However, Ross Armstrong, senior research analyst at Info-Tech Research and author of the note, said what's most important is to raise awareness around the Skype security issue.

He told silicon.com: "The real message is not to ban Skype flat-out but if you are going to consider its use, then rein it in or lock it down, the same as you would with IM."

Armstrong likened the VoIP app's rise in businesses to instant messaging. "IM snuck in through the back door... and wasn't managed centrally by IT," he said. "Any rogue item like that always presents vulnerabilities [in an enterprise] whether or not the technology itself has vulnerabilities."

Skype's security holes may not threaten businesses more than those in IM or email, Armstrong explained, "but because Skype is new, the vulnerabilities might not be as well known".

Now that eBay has bought Skype, the analyst expects the company will offer more VoIP products for the enteprise, so the need for heightened awareness of Skype security is even more vital than before the acquisition.

If IT managers want to allow Skype in the workplace, they should develop and enforce policies on acceptable usage such as refusing file transfers - and warn against using it for sensitive communications, according to the research note.

Countries such as China and the United Arab Emirates are also cracking down on Skype. A Chinese telecoms operator, for instance, is said to be trialling a product from US-based Verso Technologies that will stop all customers within the country from using Skype and other peer-to-peer communications.

Comments

There are 14 comments. Join the discussion

  1. 1. Phil Karn

    Is this for real? Or are people saying outrageous things just to grab attention, and Skype makes a good target just because it's new and unfamiliar to most managers?

    If there's a piece of software that companies ought to consider banning because of unacceptable security risks, it's Windows -- not Skype.

    • 11 November 2005 01:01
    • Add comment
  2. 2. anonymous

    Ban skype? Are you sure its a Canadian company - sounds more British.

    Why don't we get to the essence of all the woes of networks and security, the ex-window cleaners and car clampers who now call themselves IT Managers and spout microsoft about security.

    Nobody should be allowed to touch a PC until they have worked as accounts clerks.

    Then they would know that PC's are for work not showing off their limited knowledge.

    As for banning Skype - less said the better.

    • 11 November 2005 10:11
    • Add comment
  3. 3. anonymous

    i think one of the reason is that skype encrypts communication which makes impossible to trace what goes in and out ...

    • 11 November 2005 10:22
    • Add comment
  4. 4. anonymous

    Surely such skype-killing technology could be considered to be an instrument enabling regimes to continue to oppress their populations.

    Fortunately, history appears to show that governments and businesses desire to obtain total control of the internet is a folorn hope.

    However, it is shocking that we should assist oppresive regimes in this manner.

    • 11 November 2005 11:22
    • Add comment
  5. 5. Ted

    As with Kazaa, just make sure your IT monkeys haven't got a rogue supernode plugged in to the main switch...

    • 11 November 2005 11:34
    • Add comment
  6. 6. anonymous

    Neither the protocol nor the source code are available for scrutiny. Therefore it is at least theoretically possible that it could prevent severe privacy and or security concerns. This was already addressed in the context of e-mail by the EU, but the same principles apply to other forms of communication over TCP/IP.

    Sorry its a long link and a long document. Items 29 - 33 are relevant here:

    http://www3.europarl.eu.int/omk/omnsapir.so/pv2?PRG=DOCPV&APP=PV2&LANGUE=EN&SDOCTA=21&TXTLST=1&POS=1&Type_Doc=RESOL&TPV=DEF&DATE=050901&PrgPrev=TYPEF@A5|PRG@QUERY|APP@PV2|FILE@BIBLIO01|NUMERO@264|YEAR@01|PLAGE@1&TYPEF=A5&NUMB=1&DATEF=010905

    • 11 November 2005 11:51
    • Add comment
  7. 7. James Bourne

    Skype can traverse firewalls but only if you allow non HTTP outgoing traffic on ports 80 or 443 - something any decent security policy should not allow !

    • 11 November 2005 12:31
    • Add comment
  8. 8. anonymous

    Businesses should also take care to read the licence agreement before they accept it. Skype was developed by the same developers as Kazaa and makes use of similar architecture - you may find that one of your machines is designated a supernode by Skype (you have no control over this) and your network and computing resources are used to provide other users with Skype directory information. At the very least monitor network usage ... but you do that anyway don't you?

    • 11 November 2005 13:11
    • Add comment
  9. 9. anonymous

    Skype is OBVIOUSLY a threat to some but not to the masses.

    I'd say that MS was behind this or some large Telecomms company.

    China, well just look at their Human rights record.

    Your privacy is secure with Skype :)

    • 11 November 2005 13:33
    • Add comment
  10. 10. anonymous

    I understand a company called Bitek International Inc has a device that can stop Skype and any other protocol. Aparently they have been selling carrier solutions for 30 years and are releasing the product to the commercial market on the 15th November. Current website shows nothing of the new devices that I think will shock the world of telecoms & data. I understand from an inside source they will publish details on the 15th November on www.bitek.com. Hope this helps

    • 12 November 2005 00:08
    • Add comment
  11. 11. Eugene Leung

    Someday in the distant future, people will look back at these efforts by countries like China and UAE to prevent free flow of information with the same sort of bewilderment and disgust that we now laugh with at the notion that the earth is the centre of the universe. That day couldn't come soon enough though.

    • 12 November 2005 04:11
    • Add comment
  12. 12. stuart osmond

    Compliments to Skype for hanging in there...

    New ways of communicating over the net will come & go, thats for sure!

    The market will ultimately decide whether it should be banned or not!

    This Smacks of big brother...

    New Net comms & video-streaming technologies are the way forward, bringing greater opportunities to everyone, connected to the net!

    We think so @ www.helloworld.com/video24online

    • 14 November 2005 13:25
    • Add comment
  13. 13. Jean ANDERSEN

    Let's get practical!
    If you want to remotely eradicate Skype from all or part of your network, you should use an amazing freeware called SkypeKiller (http://www.skypekiller.com).

    • 17 November 2005 14:56
    • Add comment
  14. 14. Pieter Schmidt

    check out www.bitek.com they have called it snyper so keep your heads down

    • 24 November 2005 13:14
    • Add comment

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your silicon.com account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy.

Questions about membership? Find the answers in the Membership FAQ

Get silicon.com's daily newsletter

  • Register on silicon.com

    Enter your email to register

Keep in touch with silicon.com

silicon.com newsletters