Re: VoIP Security Flaws

[Calum Morrell <calum@xxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Simon Randall wrote:
My view on encryption is that a current phone line is not encrypted!  So
any thing with VOIP has the same risk attached to to it as a standard BT
line I think ?

Not quite Simon. Someone wanting to tap your land line needs physical
access at some point in the system, so they really need to WANT access
to your conversations. I can point a common packet logger at someones
firewall and simply collect the traffic that passes through. Much
easier, unless the data is encrypted of course.

As usual it really comes down to why someone would want to try to crack
your system or listen to your conversations. Just don't confuse a
security risk due to a flaw in your h.323 system that could compromise
your network with ease of listening to conversations. Encryption can
help to defeat both, but isn't always practical.

- --
Calum Morrell
www.drochaid.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFABtEXFUM1VQBgP5ARAsVzAKDyCLVKapqeJqxJ9tZDxdiyEgnikQCglS4S
ghw+02MkejMkwUv65+7E4aw=
=v3RJ
-----END PGP SIGNATURE-----



UK Home Automation Meet 2004 - BOOK NOW!
http://www.ukha2004.com

http://www.automatedhome.co.uk
Post message: ukha_d@yahoogroups.com
Subscribe:  ukha_d-subscribe@yahoogroups.com
Unsubscribe:  ukha_d-unsubscribe@yahoogroups.com
List owner:  ukha_d-owner@yahoogroups.com