Blue Box #37: Phil Zimmermann interview, VoIP security news, listener comments and more

Synopsis: Phil Zimmermann interview, VoIP security news, listener comments and more

---

Welcome to Blue Box: The VoIP Security Podcast show #37, a 60-minute podcast  from Dan York and Jonathan Zar with news and commentary about the world of VoIP security. This show also includes a 15-minute interview with Phil Zimmermann about the status of ZFone, ZRTP and more

Download the show here (MP3, 56MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at +1-206-350-2583 (new comment phone number!) to leave a comment there.

 Show Content:

• 00:20 - Intro to the show, contact information and how to provide comments.  Welcome to all the new listeners.
• 02:00 - Why is Jonathan in Asia?
• 05:29 - Programming notes
• 08:06 - Upcoming interviews
• 08:34 - Cisco Security Response: SIP User Directory Information Disclosure (about Dave & Mark)
• 09:10 - Cisco PIX firewall issue, as reported in LightReading , SecurityProNews   and TechWorld   and SearchSecurity.com
• 10:54 - IEEE Security & Privacy Magazine: Voices, I hear voices by Ivan Arce (posted to VOIPSEC)
• 11:38 - InternetNews.com: Phishers Hit The Phone Bank With Asterisk
• 14:06 - Business Week: Security Threats Come A-Callin’
• 14:26 - Converge!: Skype Detection: Traffic Classification In the Dark
• 15:04 - The Age (Australia): WiFi Skype phones to set you free (not security, per se, but combining Skype with WiFi… two of our favorite topics) Also mentioned the DualPhone.
• 17:07 - TMC.Net: Skype Certifies McAfee Internet Security Suite 2006  (also ZDNet and Skype/McAfee press release )
• 18:01 - VON Magazine: Zimmermann: Borderware Licenses Zfone Technology (you’ll hear about this in the interview)
• 20:03 - IPCommunications.com: Balancing Security with Performance at the VoIP Application Layer
• 20:34 - PRWeb: VoIP Call Monitoring Solution Provider Sets New Standard in Call Recording Security
• 21:34 - SonicWALL Internet Security Appliances Now Rated ‘Avaya Compliant’
• 21:56 - Persay First to Deploy FreeSpeech™ Biometric Speaker Verification in VoIP Contact Center; Provides Seamless, Second Factor Authentication and Enhanced Risk Management for Phone Banking
• 23:26 - Upcoming shows:
  • Sept 11-14, Boston, MA, Fall VON 2006
  • Sept 18-22, New York, Interop
  • Oct 10-13, San Diego, CA, Internet Telephony Conference and Expo – West
  • Oct 25-26, Rome, Italy, VON Italy
  • Nov 6-9, Berlin, Germany, VON Europe Autumn
  • Dec 4-6, Atlanta, GA, VON Enterprise
  • Jan 23-26, 2007, Ft. Lauderdale, FL, Internet Telephony Conference and Expo – East
  • Feb 27-Mar 1, 2007, San Francisco, “Emerging Telephony”
  • Mar 19-21, 2007, San Jose, CA, Spring 2007 VON
• 25:44 - Feature interview with Phil Zimmermann
  • Zfone update
  • Borderware and what ZRTP inclusion means
  • business model
  • call recording - how can it work with ZRTP?
  • status of release plans
  • what's next
• 40:08 - Comment (email) from Jeffrey Oxe
• 40:39 - Comment (email) from Craig Bowser
• 47:50 - Comment (audio) from Bobby Fentress
• 48:33 - Comment (email) from Crittenden IV
• 49:30 - Comment (blog) from Tom Poe asking about a SIP comment line
• 51:44 - Review of the last week's traffic on the VOIPSEC public mailing list
• 55:57 - Wrap-up of the show
  • Reminder that you can subscribe to the show via email as well as RSS
  • Mention of our Frappr map
    
• 59:57 - End of show

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at +1-206-350-2583 to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Comments

[Kand Palanisamy]

Dan and Jonathan,

Thanks for producing outstanding podcasts, spending countless hours planning, producing, editing and releasing them.

In his interview, Phil Zimmermann talked about Security Requirements for
SIP signaling and voting that happened on them in IETF 66. For those of us that do not attend these meetings, where can we find and follow the IETF standard activities and discussions related to VOIP security? Also, where can I find the audio archive of IETF 66, ones specifically related to VOIP Security? Appreciate
any specific mailing lists or URLs.

Thanks for all the hardwork,
Kand