Blue Box #65: VoIP fraud case revisited, Black Hat and Defcon presentations, VoIP security, listener comments and more..

Synopsis: Blue Box #65: VoIP fraud case revisited, Black Hat and Defcon presentations, VoIP security news, listener comments and more..

---

Welcome to Blue Box: The VoIP Security Podcast #65, a 46-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.   

Download the show here (MP3, 21MB) or subscribe to the RSS feed to download the show automatically. 

NOTE: This show was recorded on August 6, 2007.

You may also listen to this podcast right now:

Show Content:

• 00:20 - Intro to the show, contact information and how to provide comments.  Welcome to all the new listeners - and to all those listeners who have been here for so long! 
• 01:14 - Programming notes
  • VoIP Security Panel from VON now available as a Special Edition
• 02:27 - Telecom Junkies: Interview with a VoIP Hacker
• 13:21 - Black Hat / Defcon Coverage
  
  • Forbes: VoIP Vandals
• ZDNet: VoIP security vulnerabilities demonstrated at Black Hat conference
• GCN: Security an issue in dual-mode VoIP phones
• ComputerWeekly: VoIP security reaches tipping point
• ComputerWorld: Researchers flag VoIP exploits at Black Hat which points to these exploit tools and presentation
• iSEC also had a presentation/tools: “Point, Click, RTPInject” on this page of presentations
• tgdaily: PGP creator shows off VoIP encryption app – more in this weblog
• PC World: Networks: No Sweat to Skilled Hackers  (Good roundup and also mention of Estonian botnets)
• Risque Management: VoIP Scaremongers (good counterpoint)
• 23:55 - TMC.net: Security and Disaster Recovery for IP Telephony Systems (interview with Dan)
• 26:55 - TechRepublic: SolutionBase: Creating a secure and reliable VoIP solution
• 27:47 - TechRepublic: Will your VoIP provider go out of business?
• 29:07 - Enterprise VoIPPlanet: VoIPowering Your Office: Eavesdropping on VoIP Calls – Part 1
• 30:39 - vnunet: Homeland Security warns on US power threat
• 32:15 - ComputerWorld: RIM refutes security concerns over BlackBerry 8820 (interesting note about dual-mode and implications of WiFi on enterprise security)
• 35:38 - News Releases: 
  • Edgewater Networks, Inc. Introduces VoIP Performance Reporting Tool for Managed Service Providers
  • Sipera to Demonstrate VoIP-to-Data Exploit
• 37:44 - Upcoming shows:
  
  • Aug 20-23, San Francisco, CA, USA VoiceCon SF 2007 
  • Sept 10-12, Los Angeles, CA, USA ITEXPO West 2007 
  • Oct 29-Nov 1, Boston, USA, Fall 2007 VON
• 38:37 - comment (email) from Tom Cross of ISS about vulnerabilities
• 40:15- Review of the last week's traffic on the VOIPSEC public mailing list 
• 41:56 - Wrap-up of the show
  
  • Jonathan talks about recent studies around security of electronic voting machines.
• 46:05 - End of show 

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to [email protected].  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-206-350-2583 or via SIP to '[email protected]' to leave a comment there. 

Thank you for listening and please do let us know what you think of the show.