Blue Box: The VoIP Security Podcast: Blue Box #76: Cisco, Skype and BT vulnerabilities, when SIP looks like SPIT, VoIP security threat predictions and the FBI forgets to pay their bills, plus listener comments and more...

February 14, 2008

Blue Box #76: Cisco, Skype and BT vulnerabilities, when SIP looks like SPIT, VoIP security threat predictions and the FBI forgets to pay their bills, plus listener comments and more...

Synopsis: Blue Box #76: Cisco, Skype and BT vulnerabilities, when SIP looks like SPIT, VoIP security threat predictions and the FBI forgets to pay their bills, plus listener comments and more...

Welcome to Blue Box: The VoIP Security Podcast #76, a 38-minute podcast from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.

Download the show here (MP3, 17MB) or subscribe to the RSS feed to download the show automatically.

You may also listen to this podcast right now:

Show Content:

00:20 - Intro to the show, contact information and how to provide comments. Welcome to all the new listeners - and to all those listeners who have been here for so long!
new comment line +1-415-830-5439
Cisco: Cisco Unified Communications Manager CTL Provider Heap Overflow
Skype: SKYPE-SB/2008-001: Skype Cross Zone Scripting Vulnerability – coverage in Skype blog and ComputerWorld article
GNUcitizen: BT Home Call Jacking also mentioned in VOIPSEC message – coverage in PC World and The Register
Voice of VOIPSA: SIP Security slides at ETSI event
Voice of VOIPSA: How do you differentiate between legitimate SIP usage and SPIT? pointing to Dan’s Internet-Draft document
RFC 5039 on SIP and Spam
Sipera “news release on Top 5 VoIP Threat Predictions of 2008 – coverage in The Register: 2008 – the year VoIP gets hacked? and IT Business Edge: VoIP Security Still Falling Short
SearchSecurity.com: Enterprise security in 2008: Addressing emerging threats like VoIP and virtualization
C|Net blogs: Can terrorists use the Net to avoid wiretaps?

FBI Wiretaps dropped due to unpaid bills

CityCell joins rivals forced to pay up for VoIP infringements
Comment (email) from someone looking for VoIP security professional in Connecticut
Comment (email) from Shlomo Dubrowin
Review of the last week's traffic on the VOIPSEC public mailing list
Wrap-up of the show
38:09 - End of show

Comments, suggestions and feedback are welcome either as replies to this post or via e-mail to [email protected]. Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows. You may also call the listener comment line at either +1-415-830-5439 or via SIP to '[email protected]' to leave a comment there.

Thank you for listening and please do let us know what you think of the show.

Posted by Dan York on February 14, 2008 at 07:37 PM in Blue Box, Podcasts, VoIP Security, VOIPSA | Permalink

Tags: blue box, bluebox, bt, cisco, dan york, danyork, jonathan zar, security, sip, sip security, sipera, skype, spit, voice spam, voip, voip security, voipsa, voipsecurity

Comments

The comments to this entry are closed.

Contact Information

E-mail
[email protected]
Syndication

Subscribe to this podcast
Follow Us
Twitter: @blueboxpodcast
Google+: Blue Box page
Comment Line
+1-415-830-5439
Direct Telephone
(Dan) Skype danyork or
+1-802-735-1624
Subscribe via e-mail
Enter your email to subscribe:

Powered by FeedBlitz

Full Disclosure

Dan York, CISSP, is the Chair of the VOIP Security Alliance (VOIPSA) and Senior Content Strategist for the Internet Society.
Jonathan Zar is affiliated with Pingalo and is the Secretary of VOIPSA and member of the Board of Directors.
This is a personal project and neither the Internet Society, Pingalo nor VOIPSA have any formal connection to this podcast. In the interest of transparency we just thought you should know our affiliations.