Search:  

 
 
   News
newer
story category Businesses Fail to Heed VoIP Security Threats
Experts warn companies to start thinking about their risks
(old news - 09:33AM Sunday Mar 30 2008)
tags: business · security · VoIP
At the end of 2007, analysts and journalists made their predictions about all things tech in 2008. Among those predictions were numerous warnings that VoIP security risks were going to be high this year. Businesses were forewarned to start protecting their VoIP systems from hackers and they took those warnings seriously for all of about five minutes. Despite being told that they should test their VoIP systems now to avoid security problems down the line, research indicates that most businesses aren’t doing anything to make sure that their VoIP systems are secure.

Large companies (with 1000+ employees) seem to have taken the most precautionary measures; around 15% of them have tested out their VoIP systems. That’s about twice as many as smaller businesses who may not want to invest the money in testing out their systems until VoIP threats become more imminent. Of course, lots of gloomy predictions were made about technologies in 2008 and few have come to pass as we wrap up the first quarter of the year. Nevertheless experts remind business owners that risk-management is usually a far better approach to business than waiting to deal with the consequences is.

Related:
  1. Report: Zombie Threat Grows, VoIP Vulnerable
  2. Cell Phones and VoIP Calls Easy to Hack
  3. Friday Evening Links
  4. Wednesday Evening Links
  5. Thursday Evening Links
  6. Skype Takes Heat For Chinese Censorship
  7. Monday Evening Links
  8. Verizon Loses Cox Patent Suit
Forums » Businesses Fail to Heed VoIP Security Threats
view: topics flat text 
Post a:

TK Junk Mail
Go ahead, make my day
Premium
join:2002-03-03
Margate City, NJ
clubs:
·Comcast

VOIP not alone in vulnerability; GSM mobile phones are too

»news.yahoo.com/s/pcworld/2008033···d/143969
The security of the most widely used standard in the world for transmitting mobile phone calls is dangerously flawed, putting privacy and data at risk, two researchers warned at the Black Hat conference in Europe last week.

Researchers David Hulton and Steve Muller showed at Black Hat in the U.S. last month how it was possible to break the encryption on a GSM (Global System for Mobile Communications) call in about 30 minutes using relatively inexpensive off-the-shelf equipment and software tools. The hack means they could listen in on phone calls from distances of up to 20 miles (32 kilometers) or farther away.

Since 1991 when GSM networks debuted, the integrity of their security has declined as researchers probed. In 1998, the A5/1 and the A5/2, a weaker stream cipher, were broken.

Commercial interception equipment is available(NSA anyone) now to eavesdrop on calls, which can cost up to US$1 million. Hulton and Muller were game for a challenge and wanted to do it more cheaply. For around $700 they bought a Universal Software Radio Peripheral, which can pick up any kind of frequency up to 3GHz.

And now they're planning to commercialize the technique, although Hulton said they will vet buyers.
Soon you won't have to be the NSA to eavesdrop on mobile calls using GSM.
--
My BLOG .. .. Internet News .. .. My Web Page

Nightshade
Premium
join:2002-05-26
Salem, OR


edit:
March 30th, @11:15AM

Re: VOIP not alone in vulnerability; GSM mobile phones are too

Yeah, it's bad enough that the NSA can do it, but potientally every Tom, Dick, and Harry within a 20 mile radius, Un-freakin-real! I can only imagine the damage this can cause.

Hopefully the folks at GSM will be able to come up with some new, better encryption algorithms really quick. Otherwise, there's going to be some lawsuits a brewing and rightfully so.
--
True Happiness Must Come From Within
BosstonesOwn

join:2002-12-15
Everett, MA
clubs:
·Comcast Formerly ..

I worked for years on GSM and CDMA networks , we used to for fun take test phones and bump people off the tower , then lock their frequency and key and listen in. TDMA was the easiest we had programs that actually did it for us

I still have an engineering moto pebl that I use occasionally to have a little fun with a couple neighbors.

What people don't realize is your broadcasting , albeit pretty securely , but your still broadcasting.
--
"It's always funny until someone gets hurt......and then it's absolutely friggin' hysterical!"

ureihcim
Freshly made

join:2007-12-16
Miami, FL

Re: VOIP not alone in vulnerability; GSM mobile phones are too

*michieru puts his phone in crypto mode and hops 6000 frequencies a second*

Good luck

SINGARS RT-1523 :P

aaron8301
I can't get myself to go away.

join:2005-01-03
Clarkston, WA
·CableOne

said by TK Junk Mail See Profile :

»news.yahoo.com/s/pcworld/2008033···d/143969
...possible to break the encryption on a GSM (Global System for Mobile Communications) call in about 30 minutes ...
Who the hell talks on the phone that long? I sure don't. So yay, people can now tap in on teenage girls bullshitting about which guy they like this week. I'm impressed.
Forums » Businesses Fail to Heed VoIP Security Threats


Tuesday, 07-Oct 05:35:07 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 9 years online! © 1999-2008 dslreports.com.republican-creole