Tuesday, November 27, 2007

It’s easy to hack VOIP

At least that’s what UK based VOIP expert Peter Cox, demonstrated with his Siptap software, which is able to “monitor multiple Voice-over-IP (VoIP) call streams, listening in and (record) them for remote inspection as .wav files.” Run on a test network, the application was able to extract sensitive information from a normal VoIP conversation. Still proof-of-concept, the experiment would probably have to be run on a wider scale to really demonstrate that it can work though.

The lack of privacy in VoIP connections is nothing new though, as anyone with a bit of networking knowledge can access packets of a VoIP flow from an unencrypted network and easily eavesdrop on a conversation. That’s why VoIP users need to make sure they follow a few steps to guarantee a minimum of privacy while chatting away. The best is to set up an encrypted network and just make sure you’re not giving away private information when you’re talking over VoIP. Also check out this list of 25 ways to secure your VoIP network. It includes tips like restricting VoIP to a Virtual Local Area Network (VLAN), monitoring traffic on your VoIP network, setting up firewalls or using proxy servers. You’re never too safe.

Asterisk V1.4.11 Performance! Tested, verified and documented.


Good Folks at Transnexus who did a performance test on OpenSER a while back, recently performed an in-depth performance test on Asterisk V1.4.11 configured as a SIP B2BUA. This test was conducted on a server with two Xeon 5140, dual core, 2.33 GHz CPUs and 4 GB of RAM.

The Good news is that they found an Asterisk B2BUA on this hardware can manage 1500 simultaneous calls with no transcoding and 400 simultaneous calls with G.711 to G.729 transcoding.

A summary of the test is available
The test details are available (PDF)

Asterisk[IP PBX] unveils customized Linux distro

Asterisk is an open source/free software implementation of a telephone private branch exchange (PBX) originally created by Mark Spencer of Digium. The basic Asterisk software includes many features available in proprietary PBX systems: voice mail, conference calling, interactive voice response (phone menus), and automatic call distribution. Asterisk is released under a dual license scheme, the free software license being the GNU General Public License (GPL), the other being a proprietary software license as to allow proprietary/closed and patented code, such as the G.729 codec to work with the system. Asterisk runs on NetBSD, OpenBSD, FreeBSD, Mac OS X, and Solaris, although as the native platform, Linux is the most supported of these.
AsteriskNOW is an open source Software Appliance; a customized Linux distribution that includes Asterisk (the leading open source telephony engine and tool kit), the AsteriskGUI, and all other software needed for an Asterisk system. AsteriskNOW is easy to install, and offers flexibility, functionality and features not available in advanced, high-cost proprietary business systems.

How to: Setup Asterisk PBX Easily with AsteriskNOW in 30 minutes
Setting up Asterisk is considered as a difficult task. Building a VoIP Linux server with Asterisk is easy with AsteriskNOW software, which can setup Asterisk in minutes:

AsteriskNOW is an open source Software Appliance; a customized Linux distribution that includes Asterisk (the leading open source telephony engine and tool kit), the AsteriskGUI, and all other software needed for an Asterisk system. AsteriskNOW is easy to install, and offers flexibility, functionality and features not available in advanced, high-cost proprietary business systems.

Click here to setup your AsteriskNOW

Friday, November 23, 2007

VoIP on 3G will beat Wi-Fi

Mobile VoIP is set to grow, but it will run over the 3G data provided by cellular handsets, rather than over Wi-Fi, according to a research report from Disruptive Analysis Ltd., which predicts 250 million users of 3G VoIP by 2012, compared with less than 100 million for voice on Wi-Fi.

article source: here

Deciding on a 'best' VoIP solution provider

In the modern competitive scenario, businesses need to do all that it takes to stay ahead. In this context, the change from public switch telephony network toVoIP makes a lot of sense in terms of cost efficiency and productivity enhancement. Once the decision to switch to VoIP is finalized, organizations need to choose the 'best' provider of VoIP solutions.

article source: here

Thursday, November 22, 2007

Why Nobody’s VoIP Is Secure

Eric Vyncke made headlines in October 2007 by telling an audience at RSA Conference Europe 2007 that “nearly nobody” is deploying secure VoIP — even while acknowledging, in a separate interview, that there have been deployments of hundreds or thousands of VoIP phones at a time during the past five years.

Article source: here

Top 10 Security Threat Predictions For 2008

VoIP ATTACKS
Voice over Internet Protocol (VoIP) attacks comprised more than double the number of security vulnerabilities compared to all of 2006, according to McAfee Avert Labs Top 10 Security Threats of 2008 report. While VoIP threats seem to be here to stay, the defensive technology is still playing catch-up. McAfee expects a 50 percent increase in VoIP-related threats in 2008.

article source: here

Sunday, November 4, 2007

VoIP Resellers: The best way to step into the field of VoIP

With market share for VoIP services reaching sky high, VoIP reseller business opportunities are increasing along with it. People are slowly switching from standard phone lines to voice overIP telephony due to the multitudinous advantages that this service brings along. Let us analyse few of the benefits that has made this service such a huge hit among one and all in a short span of time.

Benefits of VoIP Call Termination Services

1. This service allows you to make more than one call at any given point of time.
2. With the helps of VoIP you can send data, video and voice all three through the same line thereby increasing the efficiency of resources.
3. One of the major reasons for the popularity of this service is that the long distance and international long distance calls can be made at a much cheaper rate. You can easily save over 40% of your monthly telephony expenditure through this service.
4. IP telephony services are extremely flexible and can be easily interconnected with your existing telephony service to enable you to make cost efficient calls.
5. Besides the above mentioned advantages, business houses who have mobile workers or frequent travelers find this service to be of great use for they get the ability to make VoIP calls from anywhere across the globe! All you would need is an internet connection, computer and headphones.

It is primary because of these reasons that not just corporates but also residentials are deploying VoIP services. Therefore the time is right for a company looking to expand its operations or to enter into this field of internet telephony to become a VoIP reseller.

Article Source: here

Challenger Mobile to Offer Free VOIP Without Wi-Fi

A mystery carrier in the UK will soon be partnering with Challenger Mobile to offer free VOIP from normal cellphones without the annoying necessity for a Wi-Fi network. The prospect would allow a mobile phone user to call any country in the world for completely free if the other party supports the techology. So how does it work?

It's a SIP (Session Initiation Protocol) based service, meaning that it's compatible with most cellphone service standards already. When I call you through SIP, your number would be converted to an email-like extension automatically and be sent to a central server. That server would then contact us both to establish the connection. And in the case that your service isn't SIP supported, calls can be appropriately routed to standard telephone networks.

We'll keep an eye on the potentially excellent service. But as many of you already know, anything promising to save you money will probably cost you.

Open source gaining traction in U.S. government

Its not the exact topic which we discuss here, but important to know.

November 02, 2007
(IDG News Service) More than half of all U.S. government executives have rolled out open-source software at their agencies, and 71% believe their agency can benefit from the software, according to a survey released Thursday.

Fifty-five percent of respondents said their agencies have been involved or are currently involved in an open-source implementation, according to the survey, commissioned by the Federal Open Source Alliance, a group pushing the use of open-source software in government. The alliance is made up of Intel, Hewlett-Packard and Red Hat.

In addition, 29% of respondents who haven't adopted open-source software plan to do so in the next six to 12 months, the survey said.

"Open source is really gaining momentum in the federal marketplace," said Cathy Martin, director of public sector initiatives at HP. "It really came out loud and clear here. It was a little stronger than I even anticipated."

The survey of 218 IT decision-makers in the U.S. government found that 88% of those in intelligence agencies said that their operations can benefit from open source. That may not be surprising, given that the U.S. National Security agency has been supporting a secure Linux project, called Security Enhanced Linux, since 2001.

Article Source: here

Saturday, November 3, 2007

Why VoIP is the next target for spammers

Industry experts believe that attacks over services such as Skype are moving from proof of concept to becoming a real threat

In what looks like a highly developed piece of irony, hackers have proven that Voice over internet Telephony (VoIP) accounts are prone to the nuisance of voice spam - by attacking the university where the co-author of the protocol that VoIP runs on is professor of computer science.

Henning Schulzrinne, co-author of the session initiation protocol (SIP) that is used by all the major VoIP services except Skype, believes the attack (which left unsolicited marketing messages on multiple phone extensions at Columbia University) might have been targeted at him, but could also have been a result of the institution not having a stringent firewall policy in place. Either way, he - like many in the computer and internet security industries - now believes VoIP is the next big target for spammers.

article source: http://www.guardian.co.uk/technology/2007/nov/01/news.hacking