Blue Box: The VoIP Security Podcast

Blue Box #70: 2-yr Anniversary show, VoIP security vulnerabilities, Vonage, Comcast, phishing, listener comments and much, much more...

Synopsis:Blue Box #70: 2-yr Anniversary show, VoIP security vulnerabilities, Vonage, Comcast, phishing, listener comments and much, much more...

---

Welcome to Blue Box: The VoIP Security Podcast #70, a 51-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.   

Download the show here (MP3, 21MB) or subscribe to the RSS feed to download the show automatically. 

You may also listen to this podcast right now:

NOTE: This show was recorded on October 25, 2007.

Show Content:

• 00:20 - Intro to the show, contact information and how to provide comments.  Welcome to all the new listeners - and to all those listeners who have been here for so long! 
• Programming notes:
• Dan’s new employment with Voxeo
• Dan at VON next week – Dean Elwood is doing a VoIPUser dinner – perhaps a Blue Box dinner as well?
• We hope you enjoyed Blue Box SE 21 with Phil Zimmermann – many thanks to Martyn Davies for helping with that.
• Reporters for some of the spring shows?  (we can probably get you press credentials… if you are there)
• XSS attack and SQL injection via SIP against Asterisk
• The XSS attack against Linksys SPA-941 we discussed last week was picked up by Secure Computing which resulted in this SearchSecurity.com article: New Attack Methods Target Web 2.0, VoIP (last link sent to us by Rhodri Davies)
• Sipera released a range of vulnerabilities related to Vonage, Grandstream and more – note that the Vonage thread has been picked up by ZDNet’s Russell Shaw
• Wired: Phones Aren’t Safe Either, Hackers Say – also discussed in Network World and Russell Shaw We’ve toasted so many of these (VoIP) networks… and Dustin Trammell’s blog (in the list of sessions he attended)
• SANS: Vishing, Skype, and VoIP-Based Fraud (sent in by Craig Bowser)
• CXO Today: The Phishing Epidemic
• PCWorld.CA: The eight most dangerous consumer technologies (Skype and consumer VoIP are #6 on page 2 )
• TMC Net: VoIP Peering in Search of a Viable Interconnect Business Model (note the comments about security toward the bottom)
• Cisco TechWise podcasts Session Initiation Protocol and Security (it’s on the page… came out 10/18/07 )
• TechRepublic: Sanity check: Will Microsoft be your next phone company? (nice roundup of the MS announcements… some of the comments are also interesting)
• Comcast
• AP: Comcast blocks some Internet traffic
• Ed Brill notes the impact on Notes/Domino traffic
• cnet post
• TorrentFreak: Comcast Throttles BitTorrent Traffic, Seeding Impossible
• P2PNet: Comcast impedes hi-speed file sharing
• Carnegie Mellon’s CyLab and Nortel Combine Efforts to Research Leading Security Technologies
• SearchVoIP.au: Avaya white paper: VoIP Security for Dummies
• - Upcoming shows:
  
  
  
  • Oct 24-25, New York, USA, Interop
    
  • Oct 29-Nov 1, Boston, USA, Fall 2007 VON
• Comment (email) from Dan Wing about episode 69 and the potential DDoS attack
• Comment (email) from Raul Siles about episode 66
• Comment (email) from Raul Siles about SANS VoIP Security course
• Two-year-anniversary:
  • Comment (audio) from Martyn Davies
  • Comment (audio) from Dean Elwood
  • Comment (audio) from Mike Wallace
  • Comment (audio) from Raul Siles (with Matrix inclusion)
  • Comment (audio) from Carsten Helmuth (cut off)
  • Comment (email) from Scott Tanner
  • Comment (email) from Shlomo Dubrowin
• - Drawing for the book
• - Review of the last week's traffic on the VOIPSEC public mailing list 


• - Wrap-up of the show


• 51:14 - End of show 

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to [email protected].  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-7280 or via SIP to '[email protected]' to leave a comment there. 

Thank you for listening and please do let us know what you think of the show.

Blue Box SE#021: Interview with ZFone and ZRTP creator Phil Zimmermann by Brenno de Winter

Synopsis: Interview with ZFone and ZRTP creator Phil Zimmermann by Brenno de Winter.

---

Welcome to Blue Box: The VoIP Security Podcast Special Edition #21, a 44-minute interview between Phil Zimmermann and Brenno de Winter in August 2007.

Download the show here (MP3, 20MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

---

Show Content:

Brenno de Winter produces a Dutch podcast about information technology news called "ICT Roddels" (http://ictroddels.nl/) and back in early August he sat down with ZFone and ZRTP creator Phil Zimmermann to discuss (in English) what ZFone and ZRTP are all about. Brenno released the interview on his show and then offered it to us to run as a Blue Box show. In the 40-minute interview, Brenno and Phil spend the first 20 or so minutes talking about ZFone, ZRTP and VoIP security and then spend the remainder of the show talking about security in general, Phil's background and other topics.

While we have interviewed Phil in the past ourselves, it's been about a year since we last spoke with him and so we thought this might be an interesting update for you to hear. We thank Brenno for making the interview available to us.

I also have to say a word of thanks to long-time contributor Martyn Davies who stepped in at the last moment to provide the intro/outro to this interview. I unfortunately lost my voice after a presentation yesterday (bad news for a podcaster!) and Jonathan is currently traveling - and our goal this year is to make sure we get shows out on Wednesdays.

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to [email protected].  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-7280 or via SIP to '[email protected]' to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Blue Box #69: Linksys SPA-941 vulnerability, SIP DDoS, New release of SIPVicious, Asterisk security roadmap, other VoIP security news, listener comments and more

Synopsis:Blue Box #69: Linksys SPA-941 vulnerability, SIP DDoS, New release of SIPVicious, Asterisk security roadmap, other VoIP security news, listener comments and more

---

Welcome to Blue Box: The VoIP Security Podcast #69, a 46-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.   

Download the show here (MP3, 21MB) or subscribe to the RSS feed to download the show automatically. 

You may also listen to this podcast right now:

Show Content:

Show Content:

• 00:20 - Intro to the show, contact information and how to provide comments.  Welcome to all the new listeners - and to all those listeners who have been here for so long! 
• 01:03 - Programming notes:
  • Reminder of new comment line – 206-350-7280
  • Books from Peter Thermos and Ari Takanen – anniversary show promotion

  
  

• 02:13 - XSS attack against Linksys SPA-941
• 07:52 - USENIX ;login: article about SIP DDoS from Hement Sengar


• 12:10 - New release of SIPVicious tool suite


• 14:49 - Voice of VOIPSA: Suggestions for a Security Roadmap for Asterisk


• 21:02 - heise.uk: Skype silently fixes URI problem which relates to Windows issue pointed out back in July (see also here )


• 25:39 - heise online: Bavarian Criminal Police Office denies use of Trojan to eavesdrop on VoIP calls


• 27:57 - Zeenews.com (India): CBI favours monitoring of Internet gateways and networks


• 28:54 - Washington Post: VOIP Mix-Up Exposes Customer Call Data


• 31:58 - CXO Today (India): Mobile Business Applications Boost Security Demand




• 35:08 - Upcoming shows:
  
  
  
  • Oct 24-25, New York, USA, Interop
    
  • Oct 29-Nov 1, Boston, USA, Fall 2007 VON
• 35:33 - Comments - challenge with audio comment
  
• 35:47 - Comment (email) from Stephen Bosch asking about the CISSP credential


• 40:13 - Comment (email) from Scott Tanner (which we’ll hold for the 2-yr show) - Dan also gets talking about Dopplr.com


• 41:27 - Comment (email) from Frank Leonhardt


• 41:40 - Comment (email) from Michael Miller about PPT syncing software - answer is that we use a site called SlideShare




• 43:18 - Review of the last week's traffic on the VOIPSEC public mailing list 


• 43:57 - Wrap-up of the show
  


• 46:26 - End of show 

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to [email protected].  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-7280 or via SIP to '[email protected]' to leave a comment there. 

Thank you for listening and please do let us know what you think of the show.

Blue Box #67: Contest for listeners, discussion about status, some VoIP security news, listener comments

Synopsis:Blue Box #67: Contest for listeners, discussion about status, some VoIP security news, listener comments

---

Welcome to Blue Box: The VoIP Security Podcast #67, a 20-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.   

Download the show here (MP3, 21MB) or subscribe to the RSS feed to download the show automatically. 

You may also listen to this podcast right now:

Show Content:

Show Content:

• 00:20 - Intro to the show, contact information and how to provide comments.  Welcome to all the new listeners - and to all those listeners who have been here for so long! 
• - Discussion of:
  • reasons for break in shows having to do with Dan no longer working for Mitel
  • two-year anniversary of the show coming up on October 24th
  • listener contest for copies of Peter Thermos and Ari Takanen's new book "Securing VoIP Networks"

• - ZDNet: "Jericho Forum voices concerns over VoIP Security"

• - Telappliant: "VoIP 'more secure than traditional phone systems'" (note the last paragraph about VOIPSA)

• - SecurityFocus: "VoIP Hopping: A Method of Testing VoIP Security or Voice VLANs and Release of "VoIP Hopper tool"

• - SIP Hacking Workshop in November in Vienna

• - Upcoming shows:
  
  
  
  • Oct 29-Nov 1, Boston, USA, Fall 2007 VON
• - Comment (email) from Craig Bowser (about VoIP Hopping article)
  
• - Comment (email) from Doug Simar about iPhone

• - Review of the last week's traffic on the VOIPSEC public mailing list 
• - Wrap-up of the show
  
• 20:46 - End of show 

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to [email protected].  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to '[email protected]' to leave a comment there. 

Thank you for listening and please do let us know what you think of the show.

Blue Box SE#020 - SIP Security discussion with Cullen Jennings of IETF and Cisco

Synopsis: Interview about SIP security with Cullen Jennings, Area Director for the Real-time Applications and Infrastructure area of the Internet Engineering Task Force (IETF).

---

Welcome to Blue Box: The VoIP Security Podcast Special Edition #20, a 42-minute interview about SIP security with Cullen Jennings of IETF and Cisco.  Recorded at VoiceCon San Francisco in August 2007.

Download the show here (MP3, 19MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

---

Show Content:

In this Special Edition, I sat down with Cullen Jennings out at VoiceCon San Francisco in August 2007 to talk about SIP security. Cullen had just co-presented with Eric Rescorla a 3-hour tutorial on SIP security and in this interview we covered an overview of the topics covered in that session, such as:

• challenges in encrypting SIP signaling (forking, early media (including what it is))
• proposed methods of encrypting voice/media, including ZRTP and DTLS
• SIP identity
• SIP outbound, a proposal for helping SIP signaling work across firewalls
• certificate management in SIP
• future security issues of concern within SIP

I believe you will find it both a very educational and interesting interview that will help explain some of the various areas of SIP security.

Cullen is a Distinguished Engineer with Cisco Systems but more relevantly is one of the Area Directors for the "Real-time Applications and Infrastructure" (RAI) area of the Internet Engineering Task Force (IETF). Basically almost all of the SIP-related standards move through the RAI area of the IETF. Cullen also has a strong interest in security and has been an author on several of the security-related RFCs and Internet-Drafts related to SIP.

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to [email protected].  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to '[email protected]' to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Blue Box #66: Cisco/Grandstream/Thomson VoIP security vulnerabilities, Skype outage, VoiceCon coverage, VoIP security news, listener comments and more..

Synopsis: Blue Box #66: Cisco/Grandstream/Thomson VoIP security vulnerabilities, Skype outage, VoiceCon coverage, VoIP security news, listener comments and more..

---

Welcome to Blue Box: The VoIP Security Podcast #66, a 56-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.   

Download the show here (MP3, 21MB) or subscribe to the RSS feed to download the show automatically. 

You may also listen to this podcast right now:

Show Content:

Show Content:

• 00:20 - Intro to the show, contact information and how to provide comments.  Welcome to all the new listeners - and to all those listeners who have been here for so long! 
• 03:00 - Programming notes
  
  • First Blue Box video – what did you all think?  Should we do more of these?  (Anyone interested in helping?)
  • Upcoming interviews: excellent SIP security session with Cullen Jennings, update interview with Dave Endler/Mark Collier, contribution from Brenno deWinter of a Phil Zimmermann interview
  • Apologies if any of you had a problem downloading shows last week. Our hosting provider, LibSyn had a DNS configuration issue and people couldn’t get to the site.
• 07:55 - 3 messages SIP Remote DOS on Cisco 7940 SIP Phone – and Cisco response
• 12:17 - SIP remote attack on Grandstream SIP Phone GXV-3000
• 16:45 -Remote DOS on Thomson SIP phone ST 2030 using the VIA header and Remote DOS on Thomson SIP phone ST 2030 using the TO header
• 19:55 - Cisco: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager
• 21:55 - Asterisk AST-2007-021 – Crash from invalid/corrupted MIME bodies when using voicemail with IMAP storage (note the move away from “ASA” which Avaya had been using)
• 24:30 - Sipera softphone issue – still working with the vendor
• 25:20 - Skype outage:
  
  • Voice of VOIPSA: It’s official – Skype blames the outage on Microsoft
  • Skype responds The Microsoft connection clarified and Dan’s commentary
  • Guardian: Skype’s nightmare weekend highlights peer-to-peer fears
  • PCWorld: Vendor Warning on Skype Eavesdropping
• 33:51 - ZDNet: Sipera introduces new enterprise VoIP security toolset
• 34:32 - Voice of VoIPSA VoiceCon coverage: SIP Security and IP Telephony Security Threats and Countermeasures
• 35:36 - VoIPNews: Hacking VoIP Exposed (interview with Mark Collier)
• 37:03 - eWeek Channel Insider: VOIP Security Requires Layered Approach, Experts Say and a blog reaction
• 37:23 - Computerworld: VoIP requires attention to security best practices
• 38:30 - Network World: VoIP hacker talks: Service provider nets easy pickings based on Telecom Junkies podcast: Interview with a VoIP Hacker - also tricityherald.com: Spokane man heads to prison for hacking
• 39:14 - IEEE Digital Library: Service Provider Implementations of SIP Regarding Security
• 40:32 - News Releases: 
  • Enterasys secures enterprise VoIP
  • Fortinet Adds UTM for Small Offices (mention of VoIP and 3G)
  • ResearchAndMarkets releases a new report on VoIP security
  • Raketu Realizes Over 50% Jump in Service Subscribers in Wake of Skype Outage
• 42:50 - Upcoming shows:
  
  • Sept 10-12, Los Angeles, CA, USA ITEXPO West 2007 
  • Oct 29-Nov 1, Boston, USA, Fall 2007 VON
• 43:44 - comment (email) from Rhodri Davies about PSTN being more secure
• 48:12 - comment (email) from Atilla asking about slides for SE 19
• 49:01 - comment (email) from Jose Luis about OCS
• 52:46 - comment (email) from Sachin Joglekar about video
  
• 54:31 - Review of the last week's traffic on the VOIPSEC public mailing list 
• 55:09 - Wrap-up of the show
  
  • Jonathan mentions that Jaxtr received $10million in VC funding.
• 56:15 - End of show 

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to [email protected].  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to '[email protected]' to leave a comment there. 

Thank you for listening and please do let us know what you think of the show.

Blue Box Video Podcast #01 - SIP softphone exploit demonstration by Sipera Systems at VoiceCon San Francisco 2007

Synopsis: Blue Box Video Edition #1: SIP softphone exploit demonstration by Sipera Systems recorded at VoiceCon San Francisco 2007

---

Welcome to Blue Box: The VoIP Security Podcast Video Edition #1, a 5-minute video podcast from Dan York showing an exploit of a SIP softphone by Sipera Systems.

In this first video podcast, Dan interviewed Sachin Joglekar, Vulnerability Research Lead for Sipera Systems, about the exploit that Sipera first demonstrated at Black Hat USA 2007 last month in Las Vegas. Sachin shows how by sending a specific SIP packet, he can crash the SIP softphone but in doing so have it execute server code to which he can connect via netcat.  He then has a command prompt on the Windows system and can execute arbitrary commands.  In this case he just copied over some files.  He did indicate that they are working with the vendor of the (unnamed) SIP softphone to correct the problem.

The interview was recorded on the show floor of VoiceCon San Francisco 2007.

Download the show here (MP4, 30MB) or subscribe to the RSS feed to download the show automatically. 

You may also view the show here on this page:

Click To Play

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to [email protected].  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to '[email protected]' to leave a comment there. 

Given that this is our very first "video edition", comments are definitely appreciated.  We may try to do more of these in the future.

Thank you for listening and please do let us know what you think of the show.

P.S. Those of you wanting to know more about how I recorded the video and the tools I used (hint: I just used my Canon point-and-shoot camera) can read my post over on my Disruptive Conversations blog.

Blue Box #65: VoIP fraud case revisited, Black Hat and Defcon presentations, VoIP security, listener comments and more..

Synopsis: Blue Box #65: VoIP fraud case revisited, Black Hat and Defcon presentations, VoIP security news, listener comments and more..

---

Welcome to Blue Box: The VoIP Security Podcast #65, a 46-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.   

Download the show here (MP3, 21MB) or subscribe to the RSS feed to download the show automatically. 

NOTE: This show was recorded on August 6, 2007.

You may also listen to this podcast right now:

Show Content:

• 00:20 - Intro to the show, contact information and how to provide comments.  Welcome to all the new listeners - and to all those listeners who have been here for so long! 
• 01:14 - Programming notes
  • VoIP Security Panel from VON now available as a Special Edition
• 02:27 - Telecom Junkies: Interview with a VoIP Hacker
• 13:21 - Black Hat / Defcon Coverage
  
  • Forbes: VoIP Vandals
• ZDNet: VoIP security vulnerabilities demonstrated at Black Hat conference
• GCN: Security an issue in dual-mode VoIP phones
• ComputerWeekly: VoIP security reaches tipping point
• ComputerWorld: Researchers flag VoIP exploits at Black Hat which points to these exploit tools and presentation
• iSEC also had a presentation/tools: “Point, Click, RTPInject” on this page of presentations
• tgdaily: PGP creator shows off VoIP encryption app – more in this weblog
• PC World: Networks: No Sweat to Skilled Hackers  (Good roundup and also mention of Estonian botnets)
• Risque Management: VoIP Scaremongers (good counterpoint)
• 23:55 - TMC.net: Security and Disaster Recovery for IP Telephony Systems (interview with Dan)
• 26:55 - TechRepublic: SolutionBase: Creating a secure and reliable VoIP solution
• 27:47 - TechRepublic: Will your VoIP provider go out of business?
• 29:07 - Enterprise VoIPPlanet: VoIPowering Your Office: Eavesdropping on VoIP Calls – Part 1
• 30:39 - vnunet: Homeland Security warns on US power threat
• 32:15 - ComputerWorld: RIM refutes security concerns over BlackBerry 8820 (interesting note about dual-mode and implications of WiFi on enterprise security)
• 35:38 - News Releases: 
  • Edgewater Networks, Inc. Introduces VoIP Performance Reporting Tool for Managed Service Providers
  • Sipera to Demonstrate VoIP-to-Data Exploit
• 37:44 - Upcoming shows:
  
  • Aug 20-23, San Francisco, CA, USA VoiceCon SF 2007 
  • Sept 10-12, Los Angeles, CA, USA ITEXPO West 2007 
  • Oct 29-Nov 1, Boston, USA, Fall 2007 VON
• 38:37 - comment (email) from Tom Cross of ISS about vulnerabilities
• 40:15- Review of the last week's traffic on the VOIPSEC public mailing list 
• 41:56 - Wrap-up of the show
  
  • Jonathan talks about recent studies around security of electronic voting machines.
• 46:05 - End of show 

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to [email protected].  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to '[email protected]' to leave a comment there. 

Thank you for listening and please do let us know what you think of the show.

Blue Box #64: ARP storms, IPTComm, SRTP animations, VoIP security news, listener comments and more...

Synopsis: Blue Box #64: ARP storms, IPTComm, SRTP animations, VoIP security news, listener comments and more...

---

Welcome to Blue Box: The VoIP Security Podcast #63, a 38-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.   

Download the show here (MP3, 15MB) or subscribe to the RSS feed to download the show automatically. 

NOTE: This show was originally recorded on July 26, 2007.

You may also listen to this podcast right now:

Show Content:

• 00:20 - Intro to the show, contact information and how to provide comments.  Welcome to all the new listeners - and to all those listeners who have been here for so long! 
• 01:23 - Programming notes
  
  • ETel presentations available with sync’d audio
• 02:47 - Follow-up on story last show about iPhone and ARP packets – NetworkWorld: New Cisco advisory outlines fix for ARP storms on wireless LANs% pointing to Cisco security advisory
• 06:12 - Voice of VOIPSA: IPTComm 2007, Day One and IPTComm 2007, Day Two
• 07:21 - PC World: Black Hat/Defcon Hackfests Promise Rollicking Action (note VoIP references)
• 09:43 - ITSecurity.com: The Dark Side of VoIP: Security Vulnerabilities
• 10:18 - Techtionary.com: SRTP/Secure RTP for VoIP/SIP (animation from our friend Tom Cross)
• 11:20 - TMCNet: Bluesocket Acquires VoIP Leader Pingtel  (Interesting because Bluesocket is a security firm.)
• 13:07 - Enterprise VoIP Planet: Mark Miller continues his series with The VoIP Peering Puzzle – Part 39: SBC Architectures – Ditech Networks
• 14:31 - ZDNet UK: Research: Convergence in mobile communications (note the very last bullet around barriers to adoption)
• 15:34 - TMCNet: Cedar Point Launches Campus Emergency Notification System
• 17:20 - Tipping Point comes out with DV Labs Blog  which actually pointed to SysAdmin Magazine goes quietly into the night
• 19:27 - News Releases: 
  • Edgeline Holdings Completes the Acquisiton of Secure Voice Communications, a VoIP Security Company
  • CommScope and IPcelerate Join to Make VoIP Safer
• 22:06 - Upcoming shows:
  
  • Aug 20-23, San Francisco, CA, USA VoiceCon SF 2007 
  • Sept 10-12, Los Angeles, CA, USA ITEXPO West 2007 
  • Oct 29-Nov 1, Boston, USA, Fall 2007 VON
• 22:33 - comment (email) from Stuart McLeod about 4-day VoIP Security course he wrote that is being offered by Global Knowledge (course description is online )
• 23:14 - comment (email) from Frank Leonhardt about Facetime seminars invitation
• 24:26 - comment (blog) from “Nope” about the slidecasts
• 25:16 - Review of the last week's traffic on the VOIPSEC public mailing list 
• 25:42 - Wrap-up of the show
  
  • Mention of potential legislation about peer-to-peer communication
  • Update on the Pena/Moore VoIP Fraud case
• 31:51 - End of show 

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to [email protected].  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to '[email protected]' to leave a comment there. 

Thank you for listening and please do let us know what you think of the show.

Blue Box SE #19: "The Real Risks of VoIP Security" panel at VON Europe 2007 in Stockholm, Sweden, featuring Martyn Davies, Ari Takanen, Cullen Jennings and Akif Arsoy

Synopsis: "The Real Risks of VoIP Security" panel session at VON Europe in Stockholm, Sweden, in June 2007.  Moderated by Blue Box contributor Martyn Davies, the panel included Ari Takanen of Codenomicon, Cullen Jennings of Cisco and Akif Arsoy of Verisign.

---

Welcome to Blue Box: The VoIP Security Podcast Special Edition #19, a 55-minute podcast of the panel session "The Real Risks of VoIP Security" from VON Europe 2007 in Stockholm, Sweden, in June 2007.

Download the show here (MP3, 25MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

---

Show Content:

In this Special Edition, we bring you a recording of the panel session at VON Europe in Stockholm, Sweden, in June 2007.  Longtime Blue Box contributor Martyn Davies moderated the panel which included Ari Takanen of Codenomicon, Cullen Jennings of Cisco and Akif Arsoy of Verisign.  Rather than going with canned presentations of slides, the panel was a conversation among the panelists based on questions that Martyn had as well as questions from the audience.  I think you will find it both enjoyable and educational.

The members of the panel are, left-to-right, Martyn Davies (Dialogic), moderator, Ari Takanen (Codenomicon), Cullen Jennings (Cisco) and Akif Arsoy (Verisign):

               

We thank Martyn for contributing this recording and also compliment him on what is one of the best conference recordings we've ever offered as far as audio quality goes.  Dan also thanks Cullen Jennings for standing in for him when Dan was suddenly unable to attend Podcamp Europe.

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to [email protected].  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to '[email protected]' to leave a comment there.

Thank you for listening and please do let us know what you think of the show.