[edfrghjk]

The problem with skype isn't listening in on the calls, it's finding the links between people.

The P2P nature of Skype makes it difficult to identify links of bad guys (or innocent guys that happen to be in the wrong place wrong time).

Listening in on calls isn't that useful - unless you know that "the goose flies south for winter" means we attack at dawn.

[tptacek]

As a practitioner I would be shocked (shocked!) if there wasn't a way within the Skype protocol to pop a shell on anyone running a Skype-branded Skype client.