Category Archives: Podcasts

Blue Box #42: The Rant edition – the ticking time bomb of VoIP service provider insecurity, Skype security, Swiss government and spyware, listener comments and more

Synopsis: Dan’s caffeine-fed rants on the insecurity of VoIP service providers, Middle East governments are no longer blocking Skype, the Swiss government is considering using spyware to eavesdrop on VoIP, TOR is a good thing, listener comments and much, MUCH more


Welcome to Blue Box: The VoIP Security Podcast #42, a 37-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.

NOTE: This episode’s severe laughter can only be attributed to the very strong cup of tea Dan purchased somewhere near the VT border while driving to Ottawa in the dark and heavy rain. It is very different from any other show we’ve done before – and probably will do in the future.

Download the show here (MP3, 17MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:


 Show Content:

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to ‘bluebox@voipuser.org‘ to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Blue Box SE #12: “Intro to VoIP Security” panel at Internet Telephony Fall 2006

Synopsis:"Intro to VoIP Security" panel at the Internet Telephony Exposition West 2006, October 13, 2006, San Diego, CA, USA.


Welcome to Blue Box: The VoIP Security Podcast special edition #12, a 51-minute podcast of the "Intro to VoIP Security" panel presented at the Internet Telephony Expo on Friday, October 13th, in San Diego, California, USA.

Download the show here (MP3, 21MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Participating in the panel were:

  • Ken Camp (Moderator),  Speaker – Author – Consultant IP Adventures
  • Emmitt Wells, Security and Communications Practice Manager, Getronics
  • Eric Rasmussen, Juniper Networks
  • Tom Gilheany, Leader, Enterprise Security Solutions, Nortel
  • Surya Kumar IVG, Deputy General Manager- VoIP Products and Eng, HCL Technologies

This is the first of several panel presentations we will be making available from the Internet Telephony conference.  We thank Rich Tehrani and the rest of the TMCNet staff for allowing us to record the sessions.  Thanks also to Ken Camp for his assistance and to the panelists who gave their permission to be recorded as well.

 

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to ‘bluebox@voipuser.org‘ to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Blue Box #41: Skype vulnerability, Skype security, VoIP security news, listener comments and more

Synopsis: Skype security advisory, vulnerabilities in multiple vendor’s VoIP phones, more Skype security news, VoIP security, listener comments and much more


Welcome to Blue Box: The VoIP Security Podcast #41, a 42-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.

Download the show here (MP3, 17MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:


 Show Content:

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to ‘bluebox@voipuser.org‘ to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Security Roundtable podcast on VoIP security

FYI, I was the guest on the recent Security Roundtable podcast #5 focused on VoIP security.  I gave an overview of VoIP security issues, discussed some best practices and answered numerous questions from the group of hosts.  It was a wide-ranging discussion that covered Skype, recent legislation, enterprise network issues and much more.  It was a fun podcast to be part of and I do appreciate the SRT team inviting my participation.  If you are new to VoIP security issues in general, do give it a listen.

Blue Box #40: VoIP fraudster a fugitive, VoIP security news, business continuity, Namibians jailed for VoIP, and much more…

Synopsis:VoIP fraudster now a fugitive, Namibians jailed for VoIP, business continuity, Skype security and more.


Welcome to Blue Box: The VoIP Security Podcast #39, a 36-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.

Download the show here (MP3, 15MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:


 Show Content:

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to ‘bluebox@voipuser.org‘ to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Blue Box #39: VoIP security news, VON conference update, 802.11 and PKI, listener comments, more

Synopsis:VoIP security news, comments and opinions – Skype security, fugitive CEOs, Phil Zimmermann, Paris Hilton, the IETF and more.


Welcome to Blue Box: The VoIP Security Podcast #39, a 42-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions. In this week’s show, we cover recent news, what happened at the VON show, 802.11 wireless security and more…

Download the show here (MP3, 17MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:


 Show Content:

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to ‘bluebox@voipuser.org‘ to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Blue Box #38: VoIP security news, Skype security, fugitive CEOs, Phil Zimmermann, Paris Hilton, the IETF and more…

Synopsis:VoIP security news, comments and opinions – Skype security, fugitive CEOs, Phil Zimmermann, Paris Hilton, the IETF and more.


Welcome to Blue Box: The VoIP Security Podcast #38, a 49-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions. In this week’s show, we cover fugitive CEOs, Phil Zimmermann, Paris Hilton, the IETF, Skype and more…

Download the show here (MP3, 20MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:


NOTE: This show was originally recorded on September 6th and was delayed due to some of the audio quality issues that you will note in the show itself.

 Show Content:

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to ‘bluebox@voipuser.org‘ to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Blue Box SE #11: IMS Security interview with Morgan Stern

Synopsis:Interview about IP Multimedia Subsystem (IMS) security with Morgan Stern.


Welcome to Blue Box: The VoIP Security Podcast special edition #11, a 17-minute podcast  from Dan York and Jonathan Zar containing an interview with Morgan Stern, Principal Consultant at Lucent Worldwide Services about the security of IMS systems.

Download the show here (MP3, 7MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

In this interview, I spoke with Morgan Stern, Principal Consultant, Global Convergence Center of Excellence, Lucent Worldwide Services, about the security of the IP Multimedia Subsystem (IMS) architecture.  Morgan has just been part of a panel session at Fall VON 2006 in Boston entitled "Securing Communication for IMS" and we covered a range of security topics, including:

  • The differences between centralized and distributed architectures
  • The various standards bodies involved with IMS
  • The emergence of "A-IMS"
  • How do we do distributed security?
  • How do we verify the authenticity of end devices?
  • Is IMS hype or reality?
  • Are there really new and innovative services coming out for IMS?
  • What are the major security issues for IMS?
  • Lawful intercept and its issues
  • His role at Lucent and what his work there is about

Morgan also provided a copy of his IMS security presentation that you may download and also mentioned a Light Reading webinar he did on IMS in general that listeners may find of interest.

If you are interested in IMS security, you may also want to listen to Blue Box podcast #35, where we interviewed author Miguel Garcia for his perspective on IMS security.

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to ‘bluebox@voipuser.org‘ to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Blue Box SE #10: Interview with Gary Miliefsky, Founder and CTO of Netclarity

Synopsis:Interview with Gary Miliefsky, Founder and CTO of Netclarity around how his products provide VoIP security and his views on VoIP security in general.


Welcome to Blue Box: The VoIP Security Podcast special edition #10, a 22-minute podcast  from Dan York and Jonathan Zar containing an interview with Gary Miliefsky, Founder and CTO of Netclarity.

Download the show here (MP3, 8MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

In this interview, we spoke with Gary Miliefsky, CISSP, Founder and CTO of Netclarity, on a wide range of VoIP security topics, including:

  • Netclarity and its products
  • How did he/Netclarity get into VoIP security?
  • Relationship of their products to firewalls
  • VoIP CVEs and the National Vulnerability Database
  • NIST recommendations
  • His perspective on where VoIP security is going

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to ‘bluebox@voipuser.org’ to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Blue Box #37: Phil Zimmermann interview, VoIP security news, listener comments and more

Synopsis: Phil Zimmermann interview, VoIP security news, listener comments and more


Welcome to Blue Box: The VoIP Security Podcast show #37, a 60-minute podcast  from Dan York and Jonathan Zar with news and commentary about the world of VoIP security. This show also includes a 15-minute interview with Phil Zimmermann about the status of ZFone, ZRTP and more

Download the show here (MP3, 56MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at +1-206-350-2583 (new comment phone number!) to leave a comment there.

 Show Content:

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at +1-206-350-2583 to leave a comment there.

Thank you for listening and please do let us know what you think of the show.