Blue Box: The VoIP Security Podcast:

« April 2007 | Main | June 2007 »

May 31, 2007

Blue Box Dinner: Monday, June 11, Stockholm, Sweden

Given that several of us will be attending VON Europe Spring 2007, we thought it made sense to get together for a dinner in Stockholm. So far, Martyn Davies, Dean Elwood, Miguel Garcia and a number of others will be there. Where is it? Currently the plan (which might change) is:

DATE: Monday, June 11, 2007
TIME: 7:00 pm
PLACE: TGI Fridays, Hamngatan 19, 1147 Stockholm

It is apparently less than 1km from the Central Station and the closest metro stations are T-Central (red, green and blue lines) and Kungstradgarden (blue line).

If you want to join us at the dinner, please leave a reply to this blog posting or drop us an email (blog reply preferred so that others can see). Anyone attending the conference - or living/working/visiting in Stockholm - is welcome to attend.

Technorati tags: blue box, bluebox, voipsa, voip security

Posted by Dan York on May 31, 2007 at 04:53 PM in Blue Box Dinners, VoIP Security | Permalink | Comments (3) | TrackBack (0)

Blue Box #59: 802.1X mini-tutorial, new VoIP security vulnerabilities, new security tools, the biggest threat to VoIP? ... botnets hitting Estonia... and chimichangas and sushi trains...

Synopsis: 802.1X mini-tutorial, new VoIP security vulnerabilities, new security tools, the biggest threat to VoIP? ... botnets hitting Estonia... and chimichangas and sushi trains...

Welcome to Blue Box: The VoIP Security Podcast #59, a 55-minute podcast from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.

Download the show here (MP3, 24MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Show Content:

00:20 - Intro to the show, contact information and how to provide comments. Welcome to all the new listeners - and to all those listeners who have been here for so long!
01:36 - Dan and Jonathan discuss recent conferences, the US DOD's JITC certification process and stray into Mexican food...
06:38 - Programming notes
- Martyn Davies will be moderating a panel on VoIP security at VON Europe that will include Dan and others
- Blue Box dinner at the June VON show on Monday, June 11th
- We’ve recently set up a group on the Facebook social networking site for fans of the show. If you are a Facebook user, feel free to join.
08:01 - Sipera Finds New VoIP Phone Security Threats
12:58 -Information Week: Security Tools Top 2007 IT Professionals Poll (VoIP drops to 3rd) – see also IT Business Edge
16:59 - ITP Technology: Cracking the code
18:25 - Network World: Security in PacketCable networks
20:59 - Speaking of Network World, by way of Mark Collier , we learned that Network World has a VoIP Security page
21:28 - VoIPPlanet: A series of ‘The VoIP Peering Puzzle’ background pieces on SBC’s
23:24 - Ken Camp: What’s the biggest Threat to Enterprise VoIP?
25:21 - CRN: VoIP Demystified
26:08 - TMCnet: Trends in IP Communications and the Evolution of the SBC
27:15 - ComputerWeekly.com: VoIP, UC adoption continue to rise
29:45 - Botnet attacks against Estonia:
- Washington Post: Cyber Assaults on Estonia Typify a New Battle Tactic
- CNN: Estonia suspects Kremlin in Web attacks
- BBC: Estonia hit by ‘Moscow cyber war’
- Global Guerrillas: Russia vs. Estonia: 21st Century State vs State conflict
34:04 - News Releases:
- General Dynamics Awarded $18 Million Contract to Deliver VoIP to the Pentagon
- Freebird releases VoIP call recorders
35:27 - Feature - mini-tutorial on IP phones and 802.1X
40:00 - Upcoming shows:
- Dustin Trammell will be speaking at Defcon 15 about VoIP and steganography
- June 12-14, Stockholm, Sweden, VON Europe Spring – both Martyn and I will be there… we’ll have a Blue Box dinner
- July 22-27, Chicago, USA IETF 69
- Aug 20-23, San Francisco, CA, USA VoiceCon SF 2007
- Sept 10-12, Los Angeles, CA, USA ITEXPO West 2007
- Oct 29-Nov 1, Boston, USA, Fall 2007 VON
42:12 - comment (email) from Phil about analog tapping of VoIP phone
44:28 - comment (email) from Shlomo Dubrowin
49:13 - Review of the last week's traffic on the VOIPSEC public mailing list
49:35 - Wrap-up of the show
51:13 - End of show

Comments, suggestions and feedback are welcome either as replies to this post or via e-mail to [email protected]. Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows. You may also call the listener comment line at either +1-206-350-2583 or via SIP to '[email protected]' to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Posted by Dan York on May 31, 2007 at 04:29 PM in Podcasts, VoIP Security, VOIPSA | Permalink | Comments (1) | TrackBack (0)

Tags: 802.1X, SBCs, security, session border controllers, sipera, voice over ip, voip, voip security, voipsa, voipsecurity

May 21, 2007

Blue Box #58: The SIP Botnet edition - VoIP bots are here, now what? Also rogue firmware mini-tutorial, other VoIP security news, listener comments, more...

Synopsis: The SIP Botnet edition - VoIP bots are here, now what? Also rogue firmware mini-tutorial, other VoIP security news, listener comments, more...

Welcome to Blue Box: The VoIP Security Podcast #58, a 35-minute podcast from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.

Download the show here (MP3, 14MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Show Content:

00:20 - Intro to the show, contact information and how to provide comments. Welcome to all the new listeners - and to all those listeners who have been here for so long!
00:53 - Programming notes
- Dan was out in Fort Huachuca, AZ, for a US DoD telecommunications conference
- Martyn Davies will be speaking on May 23 at the Eurosec conference in Paris (replacing Dan)
02:20 - Voice of VOIPSA: Ready or not, here come the IRC-controlled SIP/VoIP attack botnets
15:15 - Voice of VOIPSA: SIPit 20 shows the very clear need for SIP security interoperability
15:29 - MSN Money: Your phone may be under attack
16:43 - TechRepublic: Four obstacles to implementing VoIP (also Russell Shaw blog post)
17:31 - News Releases:
- Borderware: The economic impact of VoIP Security Vulnerabilities and how to secure VoIP for business (announcing new white paper)
18:23 - Feature - mini-tutorial on set firmware and the issue of rogue firmware loads
22:41 - Upcoming shows:
- May 23-25, Paris, France Eurosec Forum 2007 – Martyn Davies will be speaking
- June 12-14, Stockholm, Sweden, VON Europe Spring – both Martyn and I will be there… we’ll have a Blue Box dinner
- July 22-27, Chicago, USA IETF 69
- Aug 20-23, San Francisco, CA, USA VoiceCon SF 2007
- Sept 10-12, Los Angeles, CA, USA ITEXPO West 2007
- Oct 29-Nov 1, Boston, USA, Fall 2007 VON
23:20 - comment (email) from Craig Bowser about CPEs
25:08 - comment (email) from Frank Leonhardt about GoogleTalk and SIP
25:42 - comment (email) from Simon Wood about recording hardware
27:14 - comment (email) from natas
28:51 - Review of the last week's traffic on the VOIPSEC public mailing list
29:21 - Wrap-up of the show
30:16 - End of show

Thank you for listening and please do let us know what you think of the show.

Posted by Dan York on May 21, 2007 at 04:12 PM in Podcasts, VoIP Security, VOIPSA | Permalink | Comments (0) | TrackBack (0)

Tags: blue box, bluebox, bot, botnet, dan york, jonathan zar, phishing, sip, sip botnet, vishing, voip, voip security, voipsa, voipsecurity

May 20, 2007

Facebook group for "Fans of Blue Box" now created...

If any listeners use the Facebook social networking site, I have now created a "Fans of Blue Box: The VoIP Security Podcast" group which you are welcome to join. I have no idea, really, what we will do with the group and whether or not we'll even use it for anything at all. Largely, I suppose, that depends upon how many people join the group. It's all just part of our continued experimentation with "social media"... and anyone who wants to join in the experimentation is welcome to do so.

Technorati tags: blue box, facebook

Posted by Dan York on May 20, 2007 at 08:29 PM in Administrivia | Permalink | Comments (0) | TrackBack (0)

May 15, 2007

Blue Box #57: Call signaling encryption mini-tutorial, VoIP eavesdropping, VoIP security news, listener comments and men in white vans...

Synopsis: Call signaling encryption mini-tutorial, VoIP eavesdropping, VoIP security news, listener comments and men in white vans...

Welcome to Blue Box: The VoIP Security Podcast #57, a 35-minute podcast from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.

Download the show here (MP3, 18MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Show Content:

(Time codes were lost in a browser crash and will be added back in the future.)

00:20 - Intro to the show, contact information and how to provide comments. Welcome to all the new listeners - and to all those listeners who have been here for so long!
VoIP News: Your VoIP Calls are Wiretapped – and Other Legal Surprises
ZD Net blogs: They CAN spy on your IP, VoIP – through walls!
ComputerWorldUK: Virus and access protection slip down security concerns (none of execs concerned about VoIP security) – also WebWire
IETF: New draft of media keying security requirements
ChannelWeb: Cisco To Partners: Make Security Part Of Every Deal
eWeek: Extreme pumps up the network
News Releases:
- Sipera: Transition Toward End-to-End IP Driving Demand for Enterprise Media Gateways
Feature section on voice encryption
Upcoming shows:
- May 14-17, Santa Clara, CA, USA Communications Developer Conference
- May 18, Rochester, NY, USA, RIT VoIP Conference
- May 23-25, Paris, France Eurosec Forum 2007 – I am speaking
- June 12-14, Stockholm, Sweden, VON Europe Spring – both Martyn and I will be there… we’ll have to have a Blue Box dinner
- July 22-27, Chicago, USA IETF 69
- Aug 20-23, San Francisco, CA, USA VoiceCon SF 2007
- Sept 10-12, Los Angeles, CA, USA ITEXPO West 2007
- Oct 29-Nov 1, Boston, USA, Fall 2007 VON
comment (blog) from Zapperlink
comment (email) from Craig Bowser about Verizon vs Vonage
comment (email) from Ponyboy about our mention of Project Wal-Mart Freedom
comment (email) from Reuven Lakein
comment (email) from Roel Villerius
Review of the last week's traffic on the VOIPSEC public mailing list
Wrap-up of the show
35:10 - End of show