Welcome to Blue Box: The VoIP Security Podcast show #2, an 24-minute conversation between Dan York and Jonathan Zar around news and commentary in the world of VoIP security.
With this show, Jonathan Zar joins as a co-host. Jonathan also was just back from the Internet Telephony show in Los Angeles and so much of the discussion included feedback coming out from the show.
- 00:19 - Intro to the show, contact information and how to provide comments
- 01:09 - Dan covers the comment section... mainly that there are no comments yet because the show hasn't been publicized. Stated again the contact info and welcomed comments. (Including on whether or not we should keep the intro sound effects.)
- 01:43 - Discussion of last week's Skype security alerts: SKYPE-SB/2005-002 and SKYPE-SB/2005-003. Including the quick response as well as some of the media coverage.
- 05:23 - The German Federal Agency for Information Security released a report on VoIP security. (For non-German speakers, there is a ComputerWorld article in English that explains a bit more.)
- 07:28 - Dan mentions that most of the other news items he saw were about the VoIPSA Threat Taxonomy that Jonathan (who chaired the VOIPSA committee creating the taxonomy) was out at Internet Telephony to unveil
- 08:20 - Jonathan discusses reaction to the VoIP Security Threat Taxonomy and then goes into details about why the taxonomy was created, lessons learned out of it (some relating to VoIP spam, aka SPIT), statistics and how people can help (Hint: there's a wiki where participation is welcome.)
- 17:50 - Dan asks Jonathan whether there were any VoIP security products out at Internet Telephony that impressed him. (The answer is..... )
- 02:30 - Review of the last week's traffic on the VOIPSEC public mailing list, which was actually quite quiet with only a few posts about the Skype security evaluation (mentioned in show #1) and an invitation to submit papers to a conference. Dan mentioned that David Endler, the chair of VOIPSA, had just sent out a note that he was removing moderation from the list, so we will see how the traffic goes over the next week.
- 22:53 - Wrapup of the show and information about how to provide comments.
Comments, suggestions and feedback are welcome either as replies to this post or via e-mail to email@example.com. Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows. You may also call the listener comment line at +1-206-338-6654 to leave a comment there.
Thank you for listening and please do let us know what you think of the show.