Voice Over IP in UK - Skype security vunerable

This is Interesting: Free IT Magazines  
Home > Archive > Voice Over IP in UK > October 2005 > Skype security vunerable





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Skype security vunerable
Adam Aglionby

2005-10-25, 5:45 pm

Skype cracks:

http://www.channelregister.co.uk/2005/10/25/skype_vuln/

Anyone any comment on SIP security?

Thanks
Adam

Mathew Curtis

2005-10-26, 5:45 pm


Adam Aglionby wrote:
> Skype cracks:
>
> http://www.channelregister.co.uk/2005/10/25/skype_vuln/
>
> Anyone any comment on SIP security?
>
> Thanks
> Adam


Skype is not sip

Mat

Brian Widdas

2005-10-26, 5:45 pm

In article <1130270850.034501.190210@g43g2000cwa.googlegroups.com>, Adam Aglionby wrote:
> Skype cracks:
>
> http://www.channelregister.co.uk/2005/10/25/skype_vuln/
>
> Anyone any comment on SIP security?


The reported problem is with the Skype software. SIP is a protocol. There's
no useful comparison to be made.

Brian
--
* * * * ** * * ** ** * *
* ** * * ** * * * *
* * * * * *
Adam Aglionby

2005-10-26, 5:45 pm

Aware that Skype is a proprietary system whilst SIP is an open
protocol.

Reported in above story that Skype has a habit of port hopping to dodge
firewalls presumably to make user setup easy, along with large userbase
makes it attractive to hackers.

As anything takes off it will become target of attacks, happens with
browsers all the time, Firefox has had quite a few security
vunerabilities patched recently.

Seem to remember a variant of PGP being introduced to allow secure,
scrambled, voice communication.

Just wondering if there are yet any reported attempted attacks on SIP
based systems be it `tapping` or exploitation of SIP clients to run
malicious code?

Thanks
Adam

Brian

2005-10-26, 5:45 pm

On 2005-10-25, Adam Aglionby <ledlight@gmail.com> wrote:
>
> Skype cracks:
>
> http://www.channelregister.co.uk/2005/10/25/skype_vuln/
>
> Anyone any comment on SIP security?


Some resources related to VoIP security may be found at

http://www.voipsa.org/

There you will find a recent publication, the Threat Taxonomy document,
which identifies and discusses what that organisation perceives the
threats to VOIP security to be.

Also of interest is

http://csrc.nist.gov/publications/n...00-58-final.pdf

--
Brian
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com