http://csdl2.computer.org/persagen/DLAbsToc.jsp?resourcePath=/dl/proceedings... This is very interesting. That rules out ALL VBR codecs when using SRTP for security reasons. Brian West sip:brian@freeswitch.org
wow, makes me never want to use my voip phone again :D that is, for sending credit card stuff :P On 12/06/2008, at 3:44, Brian West wrote:
http://csdl2.computer.org/persagen/DLAbsToc.jsp?resourcePath=/dl/proceedings...
This is very interesting. That rules out ALL VBR codecs when using SRTP for security reasons.
Brian West sip:brian@freeswitch.org
_______________________________________________ Freeswitch-dev mailing list Freeswitch-dev@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-dev http://www.freeswitch.org
If you're using voip without SRTP they can already listen to the call.. Even wireshark lets you do that with ease. On Jun 11, 2008, at 4:57 AM, Karl Kloppenborg wrote:
wow, makes me never want to use my voip phone again :D that is, for sending credit card stuff :P
Brian West sip:brian@freeswitch.org
yer, i actually bought a new SBC yesterday from Ditech. it hasn't arrived yet, but im waiting :D Cheers, Karl Kloppenborg On 12/06/2008, at 14:33, Brian West wrote:
If you're using voip without SRTP they can already listen to the call.. Even wireshark lets you do that with ease.
On Jun 11, 2008, at 4:57 AM, Karl Kloppenborg wrote:
wow, makes me never want to use my voip phone again :D that is, for sending credit card stuff :P
Brian West sip:brian@freeswitch.org
_______________________________________________ Freeswitch-dev mailing list Freeswitch-dev@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-dev http://www.freeswitch.org
Brian West wrote:
http://csdl2.computer.org/persagen/DLAbsToc.jsp?resourcePath=/dl/proceedings...
This is very interesting. That rules out ALL VBR codecs when using SRTP for security reasons.
It probably rules out DTX/CNG setups too. The rhythm of changes between audio and DTX could well let someone pick up something about what is being said. Its gonna give less info that VBR changes, but every clue helps the evesdropper. Regards, Steve
Never thought of that.. good point. /b On Jun 12, 2008, at 12:44 PM, Steve Underwood wrote:
Brian West wrote:
http://csdl2.computer.org/persagen/DLAbsToc.jsp?resourcePath=/dl/proceedings...
This is very interesting. That rules out ALL VBR codecs when using SRTP for security reasons.
It probably rules out DTX/CNG setups too. The rhythm of changes between audio and DTX could well let someone pick up something about what is being said. Its gonna give less info that VBR changes, but every clue helps the evesdropper.
Regards, Steve
_______________________________________________ Freeswitch-dev mailing list Freeswitch-dev@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-dev http://www.freeswitch.org
Brian West sip:brian@freeswitch.org
participants (3)
-
Brian West
-
Karl Kloppenborg
-
Steve Underwood