There are plenty of times where I believe threats are overhyped. This is not one of them. 1) The default privacy setting in Skype is to allow anyone to send yo

There are plenty of times where I believe threats are overhyped. This is not one of them. 1) The default privacy setting in Skype is to allow anyone to send you a chat message. I know plenty of Skype users who complain to me about random chat messages, which indicates to me that they haven't changed their privacy preferences yet. 2) Regardless of the type of payload they used, "Low and behold I was able to remotely gain a shell." Remote shell. Through a Skype message. Would you give a random person shell access to your computer? It's more than interesting, it's terrible. 3) Spammers already infest the Skype network. If they discover this vuln before Skype patches it, you can fully expect that it will be exploited. There is no mention of priviledge escalation in the article, but once you have a shell, the world is your oyster. There are bound to be exploitable services locally on the machine. Once you're in, you've got the run of the place.