Voipsec March 2010 Archive http://voipsa.org/mailman/listinfo/voipsec_voipsa.org The VOIPSEC Security Mailing List ACM IPTComm 2010 (5 days to submission) http://voipsa.org/pipermail/voipsec_voipsa.org/2010-March/003130.html Vijay K. Gurbani: ACM IPTComm 2010 (5 days to submission): 4th ACM Conference on Principles, Systems and Applications of IP Telecommunications (IPTComm 2010) http://www.iptcomm.org August 2-3, 2010 Leibniz Supercomputing Center [...] Fwd: SIPVicious v0.2.3 supports SRV DNS records and Fingerprinting http://voipsa.org/pipermail/voipsec_voipsa.org/2010-March/003129.html Sandro Gauci: Fwd: SIPVicious v0.2.3 supports SRV DNS records and Fingerprinting: Hi Diana, <br /> SIPVicious (svwar) is not able to enumerate extensions on Yate because it cannot distinguish between one that exists in the configuration and one that does not. This is by design. By changing the response for the answers, the SIP registrar is breaking the SIP RFC which states the [...] Ford's SyncMyRide and "Whole call recordings" http://voipsa.org/pipermail/voipsec_voipsa.org/2010-March/003128.html Shawn Merdinger: Ford's SyncMyRide and "Whole call recordings": Interesting news: http://www.darkreading.com/vulnerability_management/security/client/showArticle.jhtml?articleID=223200163 <br /> Ya gotta love this lovely tidbit of fine print from the SyncMyRide terms and conditions: http://www.syncmyride.com/Own/Modules/PageTools/TermsAndConditions.aspx <br /> [...] [...] IPTComm 2010: 2 days to register papers (deadline: Friday, March 5 2010) http://voipsa.org/pipermail/voipsec_voipsa.org/2010-March/003127.html Vijay K. Gurbani: IPTComm 2010: 2 days to register papers (deadline: Friday, March 5 2010): 4th ACM Conference on Principles, Systems and Applications of IP Telecommunications (IPTComm 2010) http://www.iptcomm.org August 2-3, 2010 Leibniz Supercomputing Center [...] Skype information http://voipsa.org/pipermail/voipsec_voipsa.org/2010-March/003126.html J. Oquendo: Skype information: Can someone ping me offlist (preferably a Skype employee if possible) in regards to how Skype maps DID's to their clients. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP <br /> "It takes 20 years to build a reputation and five minutes to ruin it. [...] Fwd: SIPVicious v0.2.3 supports SRV DNS records and Fingerprinting http://voipsa.org/pipermail/voipsec_voipsa.org/2010-March/003125.html Diana Cionoiu: Fwd: SIPVicious v0.2.3 supports SRV DNS records and Fingerprinting: Hi all, <br /> Seems that sipvicicious has a significant bug. Someone tried to attack a Yate server using it. The svmap like tool worked very well and found our server. However the svwar doesn't work with Yate. Because Yate is not as stupid as Asterisk to answer with 404 when it should answer 401. [...]