[Freeswitch-users] Hello hackers!

[Cal Leeming [Simplicity Media Ltd]]

Hi Brian,

I had contemplated replying off-list, but was interested to hear other
peoples thoughts on this too.

First - could you elaborate further on the 'bad apple' that you found,
exactly what justifies an attempt to 'hack into our phone systems', and why
this person in your story has been fired because of it?

Second, in reference to the 180k IPs.. There are other companies out there
that share abusive IP information from a variety of sources. Why do they
share? Because it's nice to share. If the FreeSWITCH developers took the
same attitude as your post here, then you wouldn't have FreeSWITCH.

Third, why are you telling us this on a public mailing list? If the
honeypots are designed to catch people unwittingly, then this post does the
exact opposite. This leads me to think that a more probable story is that
you actually don't have any honey pots (or the story is slightly
exaggerated), and when you realised you gave out potentially damaging
information, you panic'd and tried to discourage by asserting this email.
If this is the case, then you are taking the lay approach of security
through obscurity.

Fourth, if someone is wanting to break into your phone system, they
probably don't care about losing their job.. and if they do, then this post
will just give them more reason to be careful about hiding themselves.

I apologise in advance if this reply is inappropriate in anyway.

Cal

On Sat, Dec 8, 2012 at 11:05 PM, Brian Foster <bdfoster at endigotech.com>wrote:

> Regarding a recent mailing list posting that included some of my IP
> addresses, most of you don't know that I do set up honeypots in hopes of
> catching some of the bad apples that try and hack into our phone systems.
> We have a centralized list of Bad IP's that end up getting sent to all of
> our other servers. Today, one of those servers was an IT guy that works for
> one of my clients. He has since been fired. If anyone is interested in the
> 180,000 IP's I've collected...sorry you can't have 'em.
>
> -BDF
>
> Sent from my iPhone
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20121209/ecf9d9c5/attachment.html