[VOIPSEC] FBI: Criminals Auto-Dialing with Hacked VoIP Systems - CSO Online - Security and Risk (UNCLASSIFIED)

[Klaus Darilion]

http://lists.digium.com/pipermail/asterisk-dev/2008-December/035597.html


regards
klaus

Craig schrieb:
> Classification:  UNCLASSIFIED 
> Caveats: NONE
> 
> 
> Hmmm, just when I was thinking nothing else big would happen in the VoIP
> space this year, this comes out.
> 
> Interesting to note that the FBI doesn't tell us (at least in this article)
> WHAT is the exact vulnerability.  Or that they didn't tell Digium either.  
> 
> http://www.csoonline.com/article/469366/FBI_Criminals_Auto_Dialing_with_Hack
> ed_VoIP_Systems
> 
> 
> On a side note, I can MAYBE understand (but not agree with) why they don't
> tell the public; perhaps they are afraid of giving additional malicious folk
> the incentive to hack Asterisk boxes.  
> 
> But I have NO idea why they wouldn't tell Digium.
> 
> Anyway, welcome to Monday.
> 
> 
> Craig L. Bowser
> CISSP		SANS GSEC (Gold)
> -------------------------------
> Price.  Quality.  Service:    Pick two. 
> Classification:  UNCLASSIFIED 
> Caveats: NONE
> 
> 
> 
> 
> _______________________________________________
> Voipsec mailing list
> Voipsec at voipsa.org
> http://voipsa.org/mailman/listinfo/voipsec_voipsa.org