Blue Box: The VoIP Security Podcast:

« June 2006 | Main | August 2006 »

July 18, 2006

Blue Box #34: IPv6 security, VoIP security news, more

Synopsis: IPv6 security, VoIP security news and more...

Welcome to Blue Box: The VoIP Security Podcast show #34, a 49-minute podcast from Dan York and Jonathan Zar with news and commentary about the world of VoIP security. This show covers the usual VoIP security news and then includes a 27-minute interview with Yurie Rich and John Spence from Command Information about IPv6 security.

Download the show here (MP3, 45MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Comments, suggestions and feedback are welcome either as replies to this post or via e-mail to [email protected]. Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows. You may also call the listener comment line at +1-206-338-6654 to leave a comment there.

Show Content:

00:20 - Intro to the show, contact information and how to provide comments. Welcome to all the new listeners. Mention of our listener survey
01:32 - Mention of IETF meeting and the audio streaming and the actual IETF agenda (also, if you have no understanding of how the IETF works, you may want to read The Tao of IETF )
02:20 - Mention of Podcast Awards - NOTE: Nominations closed on July 15th.
02:51 - Dan will be at Fall VON in Boston and Internet Telephony in San Diego - we'll plan dinners there.
03:09 - Dan will be on a panel of VoIP bloggers at Fall VON in Boston (listeners may not know of his blog at blog.danyork.com )
04:01 - Still looking for anyone with Wordpress expertise for suggestions about fighting blog spam over at Voice of VOIPSA.
04:22 - CIO India: VOIP Security Services Taking Hold
05:30 - VOIPSEC: Call for Papers/Invitation to 2nd ETSI Security Workshop
06:18 - BBC: Taipei to embrace net telephones
07:19 - MARA Top 10 Wireless and Mobile security vulnerabilities
08:54 -Top 100 Network Security Tools
11:13 Vonage V-Phone: Robin Good: Portable VoIP USB Key Makes Low-Cost Calls From Any PC You Connect It To: Vonage V-Phone and Tom Keating: Vonage V-Phone Review
13:43 - Security Watch: VoIP disrupts Aussie national security efforts points to ComputerWorld Australia article of same title
14:37 - Information Week: In Depth: Five Things You Must Know About VoIP : VoIP security is dodgy= (tip of the hat to Ken Camp’s blog )
16:12 - Upcoming shows:
- July 19-21, Tokyo, Japan, VON Japan
- August 2-3, Las Vegas, Black Hat 2006
- August 8-10, Santa Clara, CA, 3rd Annual VoIP Developer Conference
- (new) August 21-24, San Francisco, VoiceCon Fall 2006
- Sept 11-14, Boston, MA, Fall VON 2006
- (new) Sept 18-22, New York, Interop
- Oct 10-13, San Diego, CA, Internet Telephony Conference and Expo – West
- Oct 25-26, Rome, Italy, VON Italy
- Nov 6-9, Berlin, Germany, VON Europe Autumn
- Dec 4-6, Atlanta, GA, VON Enterprise
17:20 - Feature interview with Yurie Rich and John Spence (bios at bottom of this page) from Command Information about IPv6 security. Topics discussed include:
- Introductions, background
- What is the difference with IPv6? Why the interest now?
- Microsoft and what is going on with IPv6 and MS products
- US government/Department of Defense IPv6 mandates
- Is IPv6 actually more secure?
- Security issues within IPv6
- What happened to all the broadcasts?
- Implications of multicasting on network architecture
- Allocations of IPv6 address blocks
- When will we see IPv6? What is the business case?
- IPv6 in Asia
- Final thoughts
45:37 - Comment section - but for a complete change, there are no comments!
46:28 - Review of the last week's traffic on the VOIPSEC public mailing list
47:11 - Wrap-up of the show
- Mention of our Frappr map
48:40 - End of show

Thank you for listening and please do let us know what you think of the show.

Posted by Dan York on July 18, 2006 at 01:12 PM in Podcasts, VoIP Security, VOIPSA | Permalink | Comments (2) | TrackBack (1)

July 14, 2006

Blue Box #34 pushed to next week

Well, I gave it a valiant try, but the lesson of this week is that I have to either: 1) wipe and re-format my laptop; or 2) figure out another way to do post-production while travelling. When trying this week to edit the recording Jonathan and I did right before I left for IETF, my laptop kept entering a state of doing an insane amount of disk swapping... and not letting me get the editing done. So, I'm unfortunately going to have to delay it until I get back home and can use my normal system there.

The good news for you all is that you will wind up with two Blue Box podcasts next week.

BTW, the IETF meeting was excellent... if you haven't gone before, I'd definitely consider it for future meetings!

Posted by Dan York on July 14, 2006 at 11:51 AM in Administrivia | Permalink | Comments (0) | TrackBack (0)

July 13, 2006

IMS security and IPv6 security shows coming soon...

FYI, we've now recorded interviews with people about IMS security and IPv6 security... both of those shows will be posted soon. Also, this week's podcast will be coming soon - either late tonight or tomorrow. I'm up at IETF in Montreal and a wee bit challeged for production time.

Posted by Dan York on July 13, 2006 at 03:36 PM in Administrivia | Permalink | Comments (1) | TrackBack (0)

July 10, 2006

Podcast Awards nominations are open until July 15

The 2006 People's Choice Podcast Awards have opened up nominations through July 15th and if any listeners would care to nominate our show in the Technology/Science, Business or other categories, we would be deeply honored. I'm not necessarily a huge fan of these type of contests, but in this case I believe Todd Cochrane and his crew do a very solid job with the overall process and it's one that I definitely support. I've gone and nominated several of the shows I believe should be considered - and would encourage you to do the same. (If you want to nominate several shows for the same category, you can vote again each calendar day - so nominate some today, then some more tomorrow, etc. ) Voting in the contest begins later in July, but the first step is to make it through the nomination process. Thank you for your consideration.

Posted by Dan York on July 10, 2006 at 07:36 AM in Administrivia | Permalink | Comments (0) | TrackBack (0)

Telecom Junkies podcast on Pena/Moore VoIP fraud case

As we mentioned on recent shows, I (Dan) was a guest on a recent Telecom Junkies Podcast called "VoIP Fraud Sets Off New Alarms" where we discussed the Pena/Moore voip fraud case that we've been discussing on recent shows. Target audience was for "telecom managers" at large enterprises and is produced by the folks who create "The Telecom Manager's Voice Report". The other guests on the show with me were Gary Meliefsky from NetClarity and consultant Ken Agress. Definitely a fun show to do and I appreciated the Voice Report folks having me on the show.

Posted by Dan York on July 10, 2006 at 06:58 AM in Podcasts, VoIP Security | Permalink | Comments (0) | TrackBack (0)

July 07, 2006

Blue Box #33 - VoIP Fraud case and CALEA revisited, VoIP security news, listener comments and more

Synopsis: VoIP fraud case and CALEA revisited, VoIP security news, listener comments and much, much more...

Welcome to Blue Box: The VoIP Security Podcast show #33, a 44-minute podcast from Dan York and Jonathan Zar with news and commentary about the world of VoIP security. This show covers the usual VoIP security news, but then through some excellent listener comments gets back into a continued discussion of the Pena/Moore VoIP fraud case and also CALEA.

Download the show here (MP3, 40MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Show Content:

00:20 - Intro to the show, contact information and how to provide comments. Welcome to all the new listeners. Mention of our listener survey - PLEASE TAKE A MOMENT TO COMPLETE THE SURVEY! (Thank you!)
02:35 - Mention of upcoming Telecom Junkies podcast where this VoIP fraud case will be discussed.
02:56 - Mention of IETF meeting and the audio streaming and the actual IETF agenda (also, if you have no understanding of how the IETF works, you may want to read The Tao of IETF )
04:33 - Dan will be at Fall VON in Boston and Internet Telephony in San Diego - we'll plan dinners there.
05:10 - Returning to using the LAME encoder.
04:51 - The Register: Say Hello to voice phishing (pointing to Websense security alert ) tip of the hat to Liquidmatrix security blog
07:18 -eChannelLine: VoIP hackers present opportunity for channel
08:22 - VOIPSA Blog: VoWLAN with Smartphones
09:57 - NetworkWorld: AT&T tests disaster response
10:41 - More Than Half Of Tech Companies Admit Breaches In Past Year, Not Sufficiently Funding Security, Says Deloitte Report
12:50 - BellSouth Chooses Tektronix for Real-Time VoIP Service Monitoring
13:29 - Upcoming shows:
- July 19-21, Tokyo, Japan, VON Japan
- August 2-3, Las Vegas, Black Hat 2006
- August 8-10, Santa Clara, CA, 3rd Annual VoIP Developer Conference
- (new) August 21-24, San Francisco, VoiceCon Fall 2006
- Sept 11-14, Boston, MA, Fall VON 2006
- (new) Sept 18-22, New York, Interop
- Oct 10-13, San Diego, CA, Internet Telephony Conference and Expo – West
- Oct 25-26, Rome, Italy, VON Italy
- Nov 6-9, Berlin, Germany, VON Europe Autumn
- Dec 4-6, Atlanta, GA, VON Enterprise
14:06 - Comment (audio) from Martyn Davies
18:53 - Comment (email) from Aswath Rao on CALEA
21:14 - Comment (VOIPSA blog) from Randell Jesup on FCC and CALEA
24:21 - Comment (email) from Craig Bowser about VoIP fraud
25:55 - Comment (web) from Robert Welbourn
29:15 - Comment (audio) from Andy Zmolek about VoIP fraud
34:52 - Comment (email) from Julien Goodwin on LAME encoder
35:23 - Comment (email) from Matt Gibson about domains
37:08 - Comment (email) from magazine editor - Can anyone point to documented SPIT attacks?
38:03 - Comment (email) from Mark Trifiro on ENUM and ISN
41:52 - Review of the last week's traffic on the VOIPSEC public mailing list
42:30 - Wrap-up of the show
- Mention of our Frappr map
44:05 - End of show