Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: VoIP security |
|---|---|
| Date: | Thu, 21 Apr 2005 09:44:50 +0200 |
It depends... What kind of protocol is used in her case ?
But sincerely, SRT(C)P is/are not often seen and if it's a SIP phone, it
may use SIP & RTP only... So, using a sniffer, sox, vomit or smth else
would be sufficient to decode packets and get her credit card
information.
Pierre
Le mercredi 20 avril 2005 à 09:52 -0400, Seth Art a écrit :
My coworker had an interesting question. She had to validate her credit card number over the phone using her social and other sensitive information. She has a VoIP router from her ISP. The question: Are the VoIP packets encrypted as they go across the wire? Or can someone sniffing in the right place capture all of that sensitive VoIP traffic and reassemble her CC# and SS# from the tones? Is this somethign that might be an issue in the future or is there already an answer out there? -Seth
-- Pbt
signature.asc
Description: This is a digitally signed message part
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: VNC Security, Alexandre Zglav |
|---|---|
| Next by Date: | RE: Hacked (...still cleaning), Jonathan Loh |
| Previous by Thread: | RE: VoIP security, David |
| Next by Thread: | RE: VoIP security, Joshua Berry |
| Indexes: | [Date] [Thread] [Top] [All Lists] |