Comments on 'VoIP Security Threats'

Back

Next

TryPot2 (March 14th, 2008 @ 2:38 am)
Absolutely not! Most of the attacks in the video use perfectly legal VoIP protocol messages, a standard Firewall (windows or otherwise) does little to block these messages.
haccduder (March 3rd, 2008 @ 9:12 pm)
Loved the demo. I'm actually putting together a presentation about VoIP security issues for a class, but to actually see a few attacks carried out and the ease in which some were done really peaks my curiosity on the issue.
blancoh (February 6th, 2008 @ 5:09 pm)
why would it be the last thing a hacker thinks about? Eavesdropping on corporate secret conversations seems well worthy of doing. Remember statistically speaking most hacks are done internally possibly by employees themselves. To say this is the last thing a malicious person shows your ignorance. This video shows a real threat to businesses worldwide since the inception of VOIP.
gurudeveloper (December 5th, 2007 @ 1:48 pm)
1. "planting a trojan" == sitting on router. 2. "planting a trojan" is a threat itself , if a host compromised and there is a trojan, voip is one of the last things you should think about.
TryPot2 (December 5th, 2007 @ 3:42 am)
Not all of the threats I demonstrate require capturing sniffer traces, but yes I could make a video based on monitoring email. This is a risk which is exactly why sensitive email needs to be encrypted. The reason for the Video is to highlight the risks of VoIP, I do not claim that there are no solutions.
TryPot2 (November 29th, 2007 @ 10:54 am)
The assumption that you need to sit on your own router is wrong. Some of the attacks shown can be launched remotely. Even for those that require traffic monitoring can be done in other ways, for example planting a trojan on the target's computer. The point of this video is to illustrate just some of the security threats that face VoIP networks, there are others. As for the comment that this is for people who don't even know how SIP works in modern implementations, this is probably the majority.
AwardConsulting (November 28th, 2007 @ 9:35 pm)
Very useful information. Thank you for sharing this with people. Look forward to having tools to protect VOIP traffic.
unaizu (November 24th, 2007 @ 12:40 am)
Hey I guess we are assuming a lot of things here. Come on, you could also make a video where you capture sniffer traces of all the private emails and transactions from a company. Going though the internet or a network doesn't mean that you can sniff all the traffic or inject traffic on it, there are plenty of methods to avoid this happening! of course if someone doesn't configure the right security levels I guess is digging his/her own grave :).
gurudeveloper (November 23rd, 2007 @ 2:16 pm)
Bullshit, you need to sit on router to perfom all those tricks , and if your router compromised , voip is the last thing you should think about. This video affects those people who doesn't know how SIP works in modern implementations (Asterisk, SER, Cisco etc). Damn! they even doesn't know how switches work..
TryPot2 (November 17th, 2007 @ 7:38 am)
The demos shown in the video use my own sip testing tools. These are not publicly available
Bomzasss (November 15th, 2007 @ 8:57 am)
Please tell me what does he use for these commands and what are the commands!
fofannet (November 14th, 2007 @ 8:28 am)
which tool is it to generate sip messages under windows ?

Next

 

Gems and Jewelry Videos Copyright © 2008 All Rights Reserved.