Skype can't fix a nasty security bug without a massive code rewrite