Comments on: And why exactly would I want to install “Ringjacker” and let other people hijack my inbound ringtone? http://voipsa.org/blog/2007/02/05/and-why-exactly-would-i-want-to-install-ringjacker-and-let-other-people-hijack-my-inbound-ringtone/ Collective thoughts and musings on the state of VoIP security today. Mon, 06 Oct 2008 20:07:34 +0000 http://wordpress.org/?v=2.6.2 By: Johanna http://voipsa.org/blog/2007/02/05/and-why-exactly-would-i-want-to-install-ringjacker-and-let-other-people-hijack-my-inbound-ringtone/#comment-40230 Johanna Fri, 30 Mar 2007 18:08:00 +0000 http://voipsa.org/blog/2007/02/05/and-why-exactly-would-i-want-to-install-ringjacker-and-let-other-people-hijack-my-inbound-ringtone/#comment-40230 Dan York; Thanks soooo much. about the ringjacker ring tone. I was just informed by skype that I had "won" a free ringjacker ring tone gizmo. I am horrified that someone can screw around with my system for "fun" Some fun. Don't I have enough nightmares about someone sending me worms, trojan horses and messing with me -- or heaven forbid through me to my clients. Skype, get real. This "freebie" ain't free. Johanna Dan York; Thanks soooo much. about the ringjacker ring tone. I was just informed by skype that I had “won” a free ringjacker ring tone gizmo. I am horrified that someone can screw around with my system for “fun” Some fun. Don’t I have enough nightmares about someone sending me worms, trojan horses and messing with me — or heaven forbid through me to my clients. Skype, get real. This “freebie” ain’t free. Johanna

]]> By: yahia http://voipsa.org/blog/2007/02/05/and-why-exactly-would-i-want-to-install-ringjacker-and-let-other-people-hijack-my-inbound-ringtone/#comment-34647 yahia Wed, 21 Mar 2007 06:10:49 +0000 http://voipsa.org/blog/2007/02/05/and-why-exactly-would-i-want-to-install-ringjacker-and-let-other-people-hijack-my-inbound-ringtone/#comment-34647 Yes Dan, you are a grumpy curmudgeon, yet i cant imagine anyone changing any of my network or even one system settings with me getting several sleepless nights . thx skipe but no no no Yes Dan, you are a grumpy curmudgeon, yet i cant imagine anyone changing any of my network or even one system settings with me getting several sleepless nights .
thx skipe but no no no

]]> By: Dan York http://voipsa.org/blog/2007/02/05/and-why-exactly-would-i-want-to-install-ringjacker-and-let-other-people-hijack-my-inbound-ringtone/#comment-28088 Dan York Wed, 07 Mar 2007 13:42:00 +0000 http://voipsa.org/blog/2007/02/05/and-why-exactly-would-i-want-to-install-ringjacker-and-let-other-people-hijack-my-inbound-ringtone/#comment-28088 @Martyn: Good point... how *would* I know that it was my phone? @Matt: Thanks for the comment, and yes, the issue with older clients out there is definitely a strong point. @Martyn: Good point… how *would* I know that it was my phone?

@Matt: Thanks for the comment, and yes, the issue with older clients out there is definitely a strong point.

]]> By: Matt Hamrick http://voipsa.org/blog/2007/02/05/and-why-exactly-would-i-want-to-install-ringjacker-and-let-other-people-hijack-my-inbound-ringtone/#comment-27920 Matt Hamrick Wed, 07 Mar 2007 04:49:39 +0000 http://voipsa.org/blog/2007/02/05/and-why-exactly-would-i-want-to-install-ringjacker-and-let-other-people-hijack-my-inbound-ringtone/#comment-27920 Yes Dan, you are a grumpy curmudgeon, but that's not important right now... ;-) I was thinking that Ringjacker would only allow you to choose from a number of a set of pre-qualified ringtones, but their site definitely implies that you can record a message and ring someone else's' client with it. While I don't like the idea of just anyone doing this, in a perfect world where we didn't have to worry about security, I can see how it might be "fun" to give my wife or friends the ability to moo at me to get my attention. With a little bit of luck, I could even coax them into providing me with sounds that could be used to blackmail them in the future. But we don't live in that world, so even though I think it's clear that the youngin's this plugin is aimed at couldn't care a whit about security, I have to agree with you. At best it's an invitation for chicanery, at worst it broadens the "security cross-section" of a system. I have enough nightmares about bad-guys reverse engineering Skype 1.x and infecting the million or so people still running old clients. We don't need to add to the trauma by increasing the code size and adding one more potential point of failure... especially on systems running software that specializes in worming its way through firewalls... -Cheers Yes Dan, you are a grumpy curmudgeon, but that’s not important right now… ;-)

I was thinking that Ringjacker would only allow you to choose from a number of a set of pre-qualified ringtones, but their site definitely implies that you can record a message and ring someone else’s’ client with it.

While I don’t like the idea of just anyone doing this, in a perfect world where we didn’t have to worry about security, I can see how it might be “fun” to give my wife or friends the ability to moo at me to get my attention. With a little bit of luck, I could even coax them into providing me with sounds that could be used to blackmail them in the future.

But we don’t live in that world, so even though I think it’s clear that the youngin’s this plugin is aimed at couldn’t care a whit about security, I have to agree with you. At best it’s an invitation for chicanery, at worst it broadens the “security cross-section” of a system. I have enough nightmares about bad-guys reverse engineering Skype 1.x and infecting the million or so people still running old clients. We don’t need to add to the trauma by increasing the code size and adding one more potential point of failure… especially on systems running software that specializes in worming its way through firewalls…

-Cheers

]]> By: Martyn Davies http://voipsa.org/blog/2007/02/05/and-why-exactly-would-i-want-to-install-ringjacker-and-let-other-people-hijack-my-inbound-ringtone/#comment-18378 Martyn Davies Tue, 06 Feb 2007 11:53:20 +0000 http://voipsa.org/blog/2007/02/05/and-why-exactly-would-i-want-to-install-ringjacker-and-let-other-people-hijack-my-inbound-ringtone/#comment-18378 I guess that once you've seen CRBT (Color Ringback Tone, where the caller hears a tune of your choice instead of the normal "ring ring"), then changing the other guy's ringback tone is a pretty obvious jump for people thinking of new services. However, I'm with you; how would I know that it was my phone ringing, if the tone keeps changing all the time? I guess that once you’ve seen CRBT (Color Ringback Tone, where the caller hears a tune of your choice instead of the normal “ring ring”), then changing the other guy’s ringback tone is a pretty obvious jump for people thinking of new services. However, I’m with you; how would I know that it was my phone ringing, if the tone keeps changing all the time?

]]>