If you don’t want people to be able to suss out your IP at will, you might want to be careful how you use popular VOIP service Skype. A recently uncovered exploit makes it possible — and pretty easy — to figure out the IP of any given Skype user so long as you know their user name and so long as they’re currently logged on to the service. While your IP address isn’t quite the same as, say, your address or pictures of you in your underwear or something, it can be used to track you  – and you specifically — down. Of course, if you ask the RIAA, you can always just argue that your IP isn’t really you.

To pull off the trick, all you have to do is add a specific Skype user to your list with debug log file creation turned on. By going to add the person as a contact, but not sending a request, and looking at the target’s information card, Skype will make note of the target’s IP. All anyone has to do then is dig the IP out of the debug files. Once you’ve got yourself an IP, you can go ahead and do all sorts of stuff like attack the computer or use a whois service to get more information on who the person actually is.

Granted, if you’re relying on keeping your IP secret as your only form of security, you’re already in trouble. The whois stuff, on the other hand, could be a bit more of an issue. Fortunately, until Skype deals with the issue, there is an easy fix; don’t be on Skype. The exploit only works on online users, so staying logged off effectively limits the risk. Or you could use a VPN, but not being on Skype is probably easier.

When it comes to fixing the problem, Skype is on it.

In the meantime, if everybody’s out to get you, you might want to stick to phones. Or, like, cowering in the back corner of the closet, draped in musty overcoats, and wearing a tinfoil hat.

(via CNET)