Blue Box #44: SIP attack tools, VoIP security news, IETF, patents, ZRTP, Skype security, Asterisk war dialling, voice biometrics, listener comments and more
Synopsis: SIP attack tools, VoIP security news, IETF, patents, ZRTP, Skype security, Asterisk war dialling, voice biometrics, listener comments and more
Welcome to Blue Box: The VoIP Security Podcast #44, a 36-minute podcast from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.
Download the show here (MP3, 17MB) or subscribe to the RSS feed to download the show automatically.
You may also listen to this podcast right now:
Show Content:
- 00:20 - Intro to the show, contact information and how to provide comments. Welcome to all the new listeners - and to all those listeners who have been here for so long!.
- 01:26 - Dan discusses GSA conference in Boston
- 01:55- Programming notes: looking for "best" episodes for CD, schwag for Cafe Press, and notes about upcoming shows and panels
- 02:55 - Side note that Daylight Savings Time will change in the US in 2007
- 04:18 - Programming notes - More shows are in the queue
- 04:47 - IETF - Dan Wing announces that he and several others have issued a new Internet Draft summarizing media security (primarily key exchange) requirements
- 07:43 - IETF - Alan Johnston announces a new version of the ZRTP Internet-Draft
- 08:10 - IETF - Phil Zimmermann announces an Intellectual Property disclosure related to ZRTP - also point to IETF RTPSEC discussion list (Free to subscribe)
- 09:29 - Free Software Magazine – Secure VoIP calling, free software, and the right to privacy (announcing GNUTelephony implementation of ZRTP )
- 10:09 - eWeek – VoIP: How Secure? (podcast with David Endler)
- 10:35 - Mark Collier – New VoIP hacking tools released on their HackingVoIP.com website – including one that mixes in audio - and also Voice of VOIPSA: Additional VoIP Attack Tools
- 13:19 - Ottawa Citizen: Wireless tech a headache for Canadian agents
- 13:55 - onestopclick: Data breach legislation on the cards for EU firms
- 15:10 - Network World: VoIP, hackers, botnets among challenges cyberprotectors face (tip of the hat to LiquidMatrix Security Digest )
- 16:24 - SearchSecurity.com: How ‘quadplay’ convergence can improve network security
- 17:40 - 21talks: Voice recognition coming to your bank points to other entry about voice customer calling his bank via SkypeOut
- 20:01 - VoipNow: What’s Going On With Skype In Jordan?
- 20:27 - Skype Journal: Who is Threatening Skype?
- 21:03 - International Herald Tribune: Network-monitoring technology provider Narus secures $30 million in new funding
- 21:47 - Sting3r.com: Creating Secure Asterisk Links which points to IAX2 War Dialer (Note that since the time this was recorded, the site has changed its design and the links no longer work. However, the site author contacted me to tell me that a site in Germany was mirroring his original site and the links were available there. I have now changed the links to point to the German site.)
- 22:42 - TMC.net: Mobile Industry Looks to EV-DO to Boost VoIP Quality
- 23:49 - Upcoming shows:
- Nov 6-9, Berlin, Germany, VON Europe Autumn
- Nov 29-30, Tokyo, Japan, PacSec 2006
- Dec 4-6, Atlanta, GA, VON Enterprise
- Dec 5, London, UK, Secure Mobile Computing
- Jan 23-26, 2007, Ft. Lauderdale, FL, Internet Telephony Conference and Expo – East
- Feb 5-9, 2007, San Francisco, CA, RSA Conference 2007
- Feb 27-Mar 1, 2007, San Francisco, Emerging Telephony 2007
- Mar 1-2, 2007, London, EUSecWest
- Mar 19-21, 2007, San Jose, CA, Spring 2007 VON
- Mar 23-25, Washington, DC, ShmooCon ‘07
- Apr 16-20, Vancouver, BC, Canada CanSecWest 2006
- 25:00 - comment (audio) from Dave Roper
- 26:39 - comment (email) from Shlomo Dubrowin
- 27:45 - comment (email) from Ross Snowden
- 29:47 - comment (email) from Julien Goodwin (with offer of show segment)
- 30:28 - comment (weblog) from Kand Palanismy
- 31:33 - comment (weblog) from Martyn Davies
- 31:52 - comment (email) from Peter Kowalsky about Audacity notch filters
- 34:09 - Review of the last week's traffic on the VOIPSEC public mailing list
- 34:44 - Wrap-up of the show
- Reminder that you can subscribe to the show via email as well as RSS
- Mention of our Frappr map
- 37:24 - End of show
Comments, suggestions and feedback are welcome either as replies to this post or via e-mail to blueboxpodcast@gmail.com. Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows. You may also call the listener comment line at either +1-206-350-2583 or via SIP to 'bluebox@voipuser.org' to leave a comment there.
Thank you for listening and please do let us know what you think of the show.
Comments