Category Archives: Podcasts

Blue Box Podcast #27: Eavesdropping tutorial, VoIP security news, comments and more

Synopsis: Eavesdropping tutorial, VoIP security news for the week, our listener survey, US DoD conference report, listener comments and more

Welcome to Blue Box: The VoIP Security Podcast show #26, a 51-minute podcast from Dan York and Jonathan Zar with news and commentary about the world of VoIP security. This show includes a 19-minute tutorial on eavesdropping issues, discussion of our our listener survey and a brief report about Dan’s visit to the US Dept of Defense Telecommunications Services Interoperability Conference last week in Arizona.

Download the show here (MP3, 43MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Comments, suggestions and feedback are welcome either as replies to this post or via e-mail to blueboxpodcast@gmail.com. Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows. You may also call the listener comment line at +1-206-338-6654 to leave a comment there.

In this show we also mentioned our new promotion – anyone submitting audio comments (either by email or calling the comment line) before the end of May will be eligible for a drawing for a free copy of "Practical VoIP Security" from Syngress Press. Many thanks to Bruce Stewart and the folks at O’Reilly & Associates (who distribute Syngress books) for providing this book.
Three people have so far submitted audio comments, so your odds of winning are very good if you submit a comment before the end of the month!

Show Content:

00:20 – Intro to the show, contact information and how to provide comments. Welcome to all the new listeners. Mention of our listener survey – PLEASE TAKE A MOMENT TO COMPLETE THE SURVEY! (Thank you!)
03:53 – Skype gives away NA PSTN calls (also Skype blog and Skype Journal view )
06:02 – VoIP News Australia: Another way to ban Skype
07:07 – SearchSecurity.com: Skype: Its dangers and how to protect against them
07:28 – Network World: How to protect your VoIP Network (tip of the hat to Ken Camp )
08:07 – IT Observer: Tackling the VoIP Security Threat
08:33 – IT Observer: VoIP Security: Q&A with Matthew Rosen, CEO Fusion
09:06 – CIO: VoIP Security: It’s all about the implementation
09:45 – Avaya “VoIP Security for Dummies” short book – available from Avaya Developer Connection or Webtorials.com
10:33 – Thanks to Ken Camp for raving about the show
10:49 – DSL Forum announces release of TR-122 (see also Last Mile News and LightReading )
11:27 – Discussion of some of the data so far from our listener survey (please do take a few minutes to complete it if you have not already done so – thanks!)
16:12 – Feature tutorial section on eavesdropping
- what are the issues?
- what is involved?
- how is it different from the TDM world?
- how do you protect against it?
34:57 – Comment (email) from Bobby Fentress
36:35 – Comment (blog) from Choonghun Lee
37:37 – Comment (audio) from Bobby Fentress
39:45 – Brief report from Dan on his attendance at the US Dept of Defense Telecommunications Services Interoperability Conference hosted by the Joint Interoperability Test Command at Fort Huachuca in Arizona, USA. Mention of the IASE and their Security Technical Implementation Guides (STIGs) which includes one on VoIP, as well as their Security Checklists.
47:10 – Review of the last week’s traffic on the VOIPSEC public mailing list.
48:31 – Wrap-up of the show – should we do something with video? What about a "Skypecast"?
51:42 – End of show

Thank you for listening and please do let us know what you think of the show.

Blue Box Podcast #26: VoIP security news, comments and opinions

Synopsis: VoIP security news for the week, our listener survey, many listener comments and more

Welcome to Blue Box: The VoIP Security Podcast show #26, a 41-minute podcast from Dan York and Jonathan Zar with news and commentary about the world of VoIP security. This show also introduces our listener survey.

Download the show here (MP3, 38MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

In this show we also mentioned our new promotion – anyone submitting audio comments (either by email or calling the comment line) during April or May will be eligible for a drawing for a free copy of "Practical VoIP Security" from Syngress Press. Many thanks to Bruce Stewart and the folks at O’Reilly & Associates (who distribute Syngress books) for providing this book.

Show Content:

00:20 – Intro to the show, contact information and how to provide comments. Welcome to all the new listeners. Mention of our listener survey – PLEASE TAKE A MOMENT TO COMPLETE THE SURVEY! (Thank you!)
Show notes will be posted tomorrow.
41:25 – End of show

Thank you for listening and please do let us know what you think of the show.

Blue Box Podcast SE009: VoIP Security Presentation to IP Telephony for Government Conference – April 18, 2006

Synopsis: Special edition with a presentation on VoIP Security given by Dan York at the IP Telephony for Government conference on April 18, 2006, in Arlington, VA.

Welcome to a special edition of Blue Box: The VoIP Security Podcast where we present a recording of a presentation that Dan York gave on April 18, 2006, in Arlington, Virginia, at the IP Telephony Solutions for Government conference sponsored by the Homeland Defense Journal and IT*Security Magazine. In this presentation, Dan provides an introduction to VoIP security issues, discusses threats and briefly touches on best practices to protect against those threats.

Download the show here (MP3, 38MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

You may also download the presentation slides to follow along during the recording. The total show runs about 41 minutes.

Thank you for listening and please do let us know what you think of the show.

Blue Box Podcast #25: VoIP Security news, listener survey and more

Synopsis: A brief show with VoIP security news, our listener survey and more

Welcome to Blue Box: The VoIP Security Podcast show #25, a 20-minute podcast from Dan York and Jonathan Zar with news and commentary about the world of VoIP security. This show also introduces our listener survey.

Reminder: There will not be a show next week as Dan will be away.

Download the show here (MP3, 18MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

In this show we also mentioned our new promotion – anyone submitting audio comments (either by email or calling the comment line) during April will be eligible for a drawing for a free copy of "Practical VoIP Security" from Syngress Press. Many thanks to Bruce Stewart and the folks at O’Reilly & Associates (who distribute Syngress books) for providing this book.

Show Content:

00:20 – Intro to the show, contact information and how to provide comments. Welcome to all the new listeners. Mention of Frappr map for the show. Please join the map!
02:45 – Discussion of language in comments and desire to keep the show "work- and family-safe"
03:57 – Mention of Dan’s impending visit to the Podcast Academy at Boston University
04:24 – Tutorials in May – would you be interested in participating?
04:37 – VOIPSA has launched a new VoIP security-related weblog
05:26 – CNET (published by Znet): VoIP products could face export crackdown
07:40 – The Register: Security pros give VoIP the brush-off
08:33 – Sci-Tech Today: Symantec tunes up IM Monitoring
09:14 – Daily Tech: Intel Details Hardware Acellerated VoIP (also IT Week UK )
09:54 – Aswath: How COULD Skype support CALEA? (tip of the hat to Ken Camp’s blog )
11:45 – TMC.Net: Cloudmark Detects – and Thwarts – New VoIP Phishing Threat Discovered on its Network – See also:
- InformationWeek: Phishers Snare Victims with VoIP
- Techweb wire )
- TechWorld UK (via IDG): VoIP technology aids phishers
- Dan’s blog rant about all of this
15:09 – Comment from Mike Thompson with feedback about the show
16:26 – Introduction of our our listener survey
17:56 – Review of the last week’s traffic on the VOIPSEC public mailing list. Discussion around identity management and VoIP, IPSec and VoIP security, and the "phishers snare victims with VoIP" article
18:35 – Wrap-up, info about how to leave comments, upcoming shows, etc.
19:42 – End of show

Thank you for listening and please do let us know what you think of the show.

Blue Box Podcast #24: Supersized show – VoIP security news, 2 interviews, comments and much more

Synopsis: Super-sized edition – Two interviews, one with David Schwartz, CTO of Kayote networks and one with Rodolfo Rosini, CEO of Cellfire Security. VoIP security news, opinions and many comments from listeners, along with a way to potentially win a copy of a new book on VoIP security.

Welcome to Blue Box: The VoIP Security Podcast show #24, a 109-minute podcast from Dan York and Jonathan Zar with news and commentary about the world of VoIP security. This show also features a 38-minute interview with David Schwartz, CTO of Kayote Networks about his perspective on the IETF meeting in Dallas in March and SIP Identity and SPIT as well as another 18-minute interview with Rodolfo Rosini, CEO of Cellfire Security about his new startup.

This show is extra-large this week because there will be no show next week due to vacation travel and we wanted to make these interviews available.

Download the show here (MP3, 100MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Show Content:

00:20 – Intro to the show, contact information and how to provide comments. Welcome to all the new listeners. Mention of Frappr map for the show. Please join the map!
04:04 – Discussion of the "IP Telephony Solutions for Government" show where Dan spoke last week in DC and where he was able to spend some time with listener Craig Bowser.
07:28 – Mention of the book promotion, audio comments via Waxmail, vacation plans and an impending visit to the Podcast Academy at Boston University
09:40 – Tutorials in May – would you be interested in participating?
12:16 – General Dynamics Sectera vIPer secure phone
12:56 – Federal Computer Week: Army using VoIP in the battlefield
15:14 – ITWales: Keeping the VoIP house in order (Jonathan Zar article again! Not in Welsh, though…)
16:46 – EFY News: Juniper Introduces Solution to Enhance VoIP Security
17:34 – ZDNet UK: Security report sponsorship defended (should report on security be sponsored by security companies?)
21:17 – TMC.Net: Deploying Secure VoIP in the Small Enterprise (by Bogdan Materna)
21:42 – VoIPLoop: Does VoIP Need Encryption? (by Irwin Lazar)
25:02 – Realtime VoIP: Ken Camp wrote a VoIP and Firewall paper
25:38 – VoIP News: Tom Cross on VoIP Security Series: Part One – The Server
26:16 – Skype Journal: FT: Zennström confirms Skype filters text; questions he would not answer points to Financial Times article
28:18 – Gary Audin at VoIPLoop on Sox Compliance (tip of the hat to Irwin Lazar)
30:45 – beta-dot: Narus Helps Countries to Block VoIP
32:14 – New blogs:
- Telecom, Security and P2P
- VoIPLoop
33:36 – Westcon Group and Sipera announce global distribution agreement=
33:58 –UHS Broadens Availability of IP-Based Alarm Monitoring in the U.S.
34:43 – Upcoming shows:
- April 18, DC (Arlington, VA) Homeland Defense & IT Security Training Conference (I’ll be speaking)
- Interop, April 30-May 5, Las Vegas (anyone going?)
- June 1-2, DC, Workshop on VoIP security by Cybersecurity Industry Alliance and tekVizion – free to US gov, $195 for others
- June 1-2, Berlin, Third Annual VoIP Security Workshop
37:08 – Feature interview with David Schwartz of Kayote Networks. In this 38-minute interview, David discusses:
- The background and products of Kayote Networks
- Why he believes SPIT is more of a concern than many others view it as
- SIP peering, business models and security issues
- His perspective on attending the IETF meeting in Dallas last month, and specifically issues discussed there around SPIT and SIP Identity
- An explanation of the proposed SIP Identity mechanism
- His views on why "policy" is incredibly important
- The dangers lurking in SIP routing and how unprotected it is
This is the second part of our IETF-related interviews (the first was in show #22) and we hope this has given you a good perspective on what occurred at that meeting.
74:48 – Comment section and review of quick comments from Shawn Merdinger, Martyn Davies, Mark Collier and Craig Bowser
75:10 – Albert Maruggi on how the medium has impacted our business
80:02 – Leslie Asamoa-Krodua on identity management
81:49 – Martyn Davies on show format
83:11 – Kand Palanisamy on show format
84:20 – Dan Wing with a slight correction to his slides (also note that IETF changed the URL after I uploaded the show notes – thanks to Irwin Lazar for catching that)
85:26 – J.Stein on episode 22
86:18 – Feature interview with Rodolfo Rosini, CEO of Cellfire Security, a startup focused on VoIP security with a particular focus on cell phones. He provided a background on the company, its product that is now entering beta, the survey they recently concluded and the fact that they are hiring in London and San Francisco.
104:39 – Review of the last week’s traffic on the VOIPSEC public mailing list. Discussion around client authentication, Cisco-specific tools, reviews of the Practical VoIP Security book, SOX compliance, managed security service providers and much more
106:49 – Wrap-up, info about how to leave comments, upcoming shows, etc.
109:00 – End of show

Thank you for listening and please do let us know what you think of the show.

Blue Box Podcast #23: VoIP Security news, book promotion, comments and opinions

Synopsis: VoIP security news, opinions and many comments from listeners, along with a way to potentially win a copy of a new book on VoIP security.

Welcome to Blue Box: The VoIP Security Podcast show #23, a 35-minute podcast from Dan York and Jonathan Zar with news and commentary about the world of VoIP security. This show was also to feature the second of two interviews we have coming at you about the IETF meetings that took place in March 2006, however due to some production issues that interview will be pushed to the next show.

Download the show here (MP3, 33MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

In this show we also introduced our new promotion – anyone submitting audio comments (either by email or calling the comment line) during April will be eligible for a drawing for a free copy of "Practical VoIP Security" from Syngress Press. Many thanks to Bruce Stewart and the folks at O’Reilly & Associates (who distribute Syngress books) for providing this book.

Show Content:

00:20 – Intro to the show, contact information and how to provide comments. Welcome to all the new listeners. Mention of Frappr map for the show. Please join the map!
02:06 – Note that if you are hearing advertising it is not from us! (and we would like to know about it)
03:05 – Note about the book promotion
04:52 – Request to help promote the show with reviews at PodcastAlley and iTunes
05:37 – Wired: A Pretty Good Way to Foil the NSA
06:20 – Wired: Why VoIP Needs Crypto (Bruce Schneier) – Ken Camp response to Schneir and Bruce Stewart comment as well as Ars Technica reaction to Schneier: VoIP maybe not so secure?
08:07 – Network World: 802.11w fills wireless security holes
08:50 – FCW.com: Pentium computers vulnerable to cyberattack (about CanSecWest and mentions VoIP)
09:35 – Voiponder: Examining Two Well-Known Attacks on VoIP and Slashdot: Overlooked VoIP Security Issues? and points to SiVuS scanner at www.vopsecurity.org
11:33 – Red Herring – print: Spams New Target: VoIP
and Ken Camp’s response
12:51 – Techworld: Universities given more cash to secure VoIP (Ram Dantu and colleagues) – also Newsblaze: U.S. Team To Study Potential Problems in Internet Phone Systems, Continuity Central: Research collaboration to investigate VoIP vulnerabilities and Contractor UK: VoIP dials up 2 million Brits (also other info about Skype users in UK)
14:36 – Sci-Tech Today: From PBX to VoIP: Making the Change (security on page 4)
14:57 – Global Knowledge: Enterprise VoIP Security
15:31 – Searchsecurity.com: VoIP Security Learning Guide (great list of links)
16:30 – Network World Security Strategies – newsletter pointing to Siemens white papers (Telcom fraud, etc.)
17:41 – JaJah back in the news… eWeek: Cell Phones, Web Browsers to get VOIP Features and JaJah Going Wireless Soon
19:02 – Ken Camp: Skype Thoughts: P2P, tiered networks, or security risk?
19:28 – Podcast on telecom – Telecom Junkies
20:39 – Skype Podcast (from a Skype enthusiast)
21:20 – Steve Gibson also continues his excellent series of podcasts with Security Now! Episode 34 on public key cryptography
22:09 – Upcoming shows:
- April 18, DC (Arlington, VA) Homeland Defense & IT Security Training Conference (I’ll be speaking)
- Interop, April 30-May 5, Las Vegas (anyone going?)
- June 1-2, DC, Workshop on VoIP security by Cybersecurity Industry Alliance and tekVizion – free to US gov, $195 for others
- June 1-2, Berlin, Third Annual VoIP Security Workshop
23:11 – Comment from Alexis Laliberte
25:35 – Comment from Craig Bowser about meeting in DC
25:44 – Comment from Julien Goodwin about willing to engage in the debate
27:10 – Comment from Bruce Stewart
27:19 – Comment from Shawn Merdinger about VoIP arrests in Bangladesh
28:08 – Comment from anonymous posting to #21 on breathing into the mike
29:08 – Comment from Kandy on show 22
30:07 – Comment from Mark Collier that he’ll be out at Interop on a VoIP Security Panel
31:00 – Review of the last week’s traffic on the VOIPSEC public mailing list. Great discussion around IPSec vs TLS/SRTP (with metrics), softphones and VPNs and much more
32:09 – Wrap-up, info about how to leave comments, upcoming shows, etc.
32:24 – Question about whether we should continue with the current format of including an interview in the show or run the interviews separately?
34:45 – End of show

In the spirit of the programming version of Easter eggs I will ask the question: what did we do differently with regard to the audio in the recording of this episode? I did something subtle… and I’m curious to know if it is detectable. (Hmmm… sounds like a good idea for an audio comment back to us, eh?)

Thank you for listening and please do let us know what you think of the show.

Blue Box Podcast #22: SIP Security at IETF (part 1), VoIP security news, comments and more

Synopsis: VoIP security news, opinions and comments from listeners as well as a 25-minute interview with Dan Wing and Cullen Jennings from Cisco about SIP media security coming out of recent IETF meetings.

Welcome to Blue Box: The VoIP Security Podcast show #22, a 45-minute podcast from Dan York and Jonathan with news and commentary about the world of VoIP security. This show also features the first of two interviews we have coming at you about the IETF meetings that took place in March 2006. This week’s 25-minute interview is with Dan Wing and Cullen Jennings of Cisco Systems and is primarily about Dan Wing’s presentation on methods of securing the SIP media stream.

Download the show here (MP3, 43MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Show Content:

00:20 – Intro to the show, contact information and how to provide comments. Welcome to all the new listeners. Mention of Frappr map for the show. Please join the map!
02:06 – Lycos offers free phone (also Tom Keating blog entry)
08:07 – Wall Street Journal: op-ed on Skype (subscription only) – but also visible on Bruno Giussani’s blog – The fine print on Skype
09:37 – Jeff Pulver: Senate Extends Telephone Privacy Rules to VoIP Providers (found via Bruce Stewart )
11:27 – Converge! Network Digest: Security in VoIP Networks – Stronger than TDM!
12:26 – Interoute Launches the First Genuinely Secure Corporate VoIP Service – see also iSip product page – “Secure business calls wherever you are online, for free” (via Craig Bowser)
14:01 – TMC.net: Is Your Network VoIP Ready? (tip of the hat to Ken Camp )
14:58 – Upcoming shows:
- April 18, DC (Arlington, VA) Homeland Defense & IT Security Training Conference (I’ll be speaking)
- Interop, April 30-May 5, Las Vegas (anyone going?)
- June 1-2, DC, Workshop on VoIP security by Cybersecurity Industry Alliance and tekVizion – free to US gov, $195 for others
- June 1-2, Berlin, Third Annual VoIP Security Workshop
15:34 – Feature interview with Dan Wing and Cullen Jennings of Cisco Systems primarily about Dan Wing’s presentation on SIP key exchange mechansims at the recent IETF meeting in March in Dallas, Texas. In this segment, Dan goes through his first slides and explains the basic security issues around securing SIP media streams, talks about design choices for various proposed solutions and discusses where all this is going. Given that SRTP interoperability between systems is an extremely important issue right now, it’s well worth grabbing a copy of the slides and joining Dan in a journey through the issues. At about 32:03, the interview shifted to Cullen Jennings where he discussed the IETF re-organization and creation of the Realtime Applications and Infrastructure (RAI) Area and what that means for these issues. Cullen also provides his view on the security discussions that occurred down at the IETF meeting. Definitely all well worth a listen.
39:54 – End of interview
40:03 – Comment from Craig Bowser
40:40 – Comment from voipuser about Codenomicon interview
42:33 – Review of the last week’s traffic on the VOIPSEC public mailing list. Continued discussion of SRTP and UDP and much, much more
43:27 – Discussion of the ability to subscribe to the podcast via e-mail
44:04 – Wrap-up, info about how to leave comments, upcoming shows, etc.
45:25 – End of show

Thank you for listening and please do let us know what you think of the show.

Blue Box Podcast #21: VoIP security news, Sipera interview, comments and more

Synopsis: VoIP security news, opinions and comments from listeners as well as a 30-minute interview about Sipera.

Welcome to Blue Box: The VoIP Security Podcast show #21, a 57-minute podcast from Dan York and Jonathan with news and commentary about the world of VoIP security. This show also features a 30-minute interview with Micaela Giuhat, VP of product line management for Sipera.

Download the show here (MP3, 54MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Show Content:

00:20 – Intro to the show, contact information and how to provide comments. Welcome to all the new listeners. Mention of Frappr map for the show. Please join the map!
01:07 – It has been five months since we launched this show!
01:41 – News – discussion of launch of Yahoo!Voice
04:55 – Black Hat Europe: Silver Needle in the Skype (115 slides) (also at this URL )
05:30 – UPI: PGP founder unveils new VoIP security
06:03 – VON Magazine: Security at Spring VON 2006
06:13 – Network IT Week: VoIP security at odds with QoS
07:01 – Continuity Central: Keeping the VoIP House in Order (written by Jonathan)
07:38 -itnews.com.au: ISS Moves into VoIP Security (see also the ISS news release )
08:07 – VoIP News Australia: ACIF VoIP Security Fact Sheet (ACIF web site and VoIP security fact sheet )
09:03 – IT Observer: Keeping Voice Safe in the New Converged Age Voice Safe in the New Converged Age (written by BT)
09:18 – Government Computer News: FCC’s new homeland security unit
09:46 – Xmco Partners: White Paper – VoIP Security: A Layered Approach
10:10 – Cisco will have VoIP security article in April 2006 of IEEE Communications World
10:28 –Dan Wing’s presentation on SIP key exchange mechansims
11:36 – Steve Gibson over at Security Now! has started a series of podcasts on crypto issues:
- Episode 30: Crypto 101 – ethics and intro
- Episode 31: Crypto 102 – symmetric stream ciphers
12:59 – Upcoming shows:
- April 18, DC (Arlington, VA) Homeland Defense & IT Security Training Conference (I’ll be speaking)
- Interop, April 30-May 5, Las Vegas (anyone going?)
- June 1-2, DC, Workshop on VoIP security by Cybersecurity Industry Alliance and tekVizion – free to US gov, $195 for others
- June 1-2, Berlin, Third Annual VoIP Security Workshop
14:32 – Mention of Codenomicon interview and the fact that Victor Garza over at InfoWorld had some great VoIP-security-related podcasts published at weblog.infoworld.com/zeroday/
16:00 – Feature interview with Micaela Giuhat, VP of product line management for Sipera. Sipera was recently in the news for their $13.2M financing round (news release ) and also the launch of their VoIP Security System. The interview covered:
- the background of Sipera
- their products
- how their systems are different from all the other VoIP security systems out there
- the research they have done into VoIP security
- what they plan to do with the $13 million dollars
- and much, much more…
45:54 – End of interview
46:45 – Comment from Tom Hayden
47:18 – Comment from Craig Bowser
47:46 – Comment from Hema Krishnamurthy
49:08 – Audio comment from David Retikoff from Nerds On-site
52:44 – Comment from Doug Simar
54:18 – Review of the last week’s traffic on the VOIPSEC public mailing list. Large amount of interesting traffic on SPIT (Spam for Internet Telephony), SRTP, VoIP security whitepapers, Skype report and more
56:00 – Wrap-up, info about how to leave comments, upcoming shows, etc.
56:54 – End of show

Thank you for listening and please do let us know what you think of the show.

Blue Box Podcast Spring VON #3: Interview with Jim Gallagher of Codenomicon

Synopsis: Interview with Jim Gallagher of Codenomicon, provider of VoIP security test tools, from the floor of Spring VON 2006.

Welcome to a special edition of Blue Box: The VoIP Security Podcast from the floor of the Spring 2006 VON conference in San Jose, CA. In this 15 minute podcast, host Dan York interviews Jim Gallagher of Codenomicon about their company, their test tools and how they can help companies developing VoIP products.

Download the show here (MP3, 14MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

This is actually the only recording I will be bringing you from the Spring VON exhibitors. However, Victor Garza over at Infoworld’s "Zero Day Security" recorded a number of podcasts from VON that listeners to this show may also find of interest.

Blue Box Podcast #20 – VoIP security news and comments

Synopsis: Review of VoIP security news and comments from listeners

Welcome to Blue Box: The VoIP Security Podcast show #10, a 19-minute podcast from Dan York with news and commentary in the world of VoIP security. Due to scheduling issues, Dan and Jonathan were unable to connect to do the show together and given the number of news items in the queue Dan went ahead with a solo show. Both will be back together next week.

Download the show here (MP3, 18MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Show Content:

00:20 – Intro to the show, contact information and how to provide comments. Welcome to all the new listeners. Mention of Frappr map for the show. Please join the map!
01:45 – Phil Zimmermann has released a public beta of Zfone
02:07 – Sipera Gets a $13.2M Call (news release ) and also launches their VoIP Security System
03:05 – Three Skype related items:
- Skype Security Blog: One times ten?
- Skype Security Blog: Admin control of Skype features
- Black Hat Europe: Silver Needle in the Skype
04:55 – Irwin Lazar from the Burton Group has come out with a report on Skype:
- Burton Group news release
- Burton Group podcast about the report
- Techworld UK: IT Warned against Skype Hype
- IT Week: Analyst firm savages Skype
Note that the full report is only available to Burton Group clients.
05:18 – Techworld UK: VoIP heading for mainstream (see also Computerworld article that is essentially the same)
05:40 – Tom Keating: Adtran NetVanta 7100 launches
05:52 – Edmonton Journal: Input/Output
06:13 – TMC.Net: ShoreTel/Extreme Networks Partnership Promises VoIP Benefits
06:28 – Irish Developer Network: VoIP, your desire
06:43 – Processor: Software & Services You May Not Know About
07:26 – News releases: Mark Collier announces blog
07:34 – Covergence, RedSky Team to Develop E911 Solution for VoIP Service Providers
07:38 – Acme Packet Broadens Lawful Intercept/CALEA Support
07:43 – AVM Presents Professional VoIP for PBXs- VoIP for Businesses More Convenient Than Ever
07:51 – Juniper Networks Showcases Secure and Assured Voice Networking at Spring 2006 VON
07:57 – Codenomicon First to Offer Full Solution for Testing VoIP Security
08:02 – snom and Ingate Secure VoIP Traffic
08:19 – Covergence Joins Forces with Centillium Communications and NETGEAR to Deliver Bullet-Proof Consumer VoIP Security
08:40 – Upcoming shows
09:30 – Comment from Bobby Fentress
10:30 – Comment from Craig Bowser, including mention of Homeland Defense conference on VOIP
12:53 – Review of the last week’s traffic on the VOIPSEC public mailing list. Large amount of interesting traffic on SPIT (Spam for Internet Telephony)
15:53 – Note that you can now subscribe to the show via e-mail
17:23 – Wrap-up, info about how to leave comments, upcoming shows, etc.
19:30 – End of show

Thank you for listening and please do let us know what you think of the show.

Blue Box: The Voice-over-IP Security Podcast

A podcast offering news, views and commentary on security issues for Voice Over IP(VoIP), Unified Communications (UC) and IP Telephony

Category Archives: Podcasts

Blue Box Podcast #27: Eavesdropping tutorial, VoIP security news, comments and more

Blue Box Podcast #26: VoIP security news, comments and opinions

Blue Box Podcast SE009: VoIP Security Presentation to IP Telephony for Government Conference – April 18, 2006

Blue Box Podcast #25: VoIP Security news, listener survey and more

Blue Box Podcast #24: Supersized show – VoIP security news, 2 interviews, comments and much more

Blue Box Podcast #23: VoIP Security news, book promotion, comments and opinions

Blue Box Podcast #22: SIP Security at IETF (part 1), VoIP security news, comments and more

Blue Box Podcast #21: VoIP security news, Sipera interview, comments and more

Blue Box Podcast Spring VON #3: Interview with Jim Gallagher of Codenomicon

Blue Box Podcast #20 – VoIP security news and comments