Kamailio SIP Server

Kamailio™ (former OpenSER) is an Open Source SIP Server released under GPL, able to handle thousands of call setups per second. Among features: asynchronous TCP, UDP and SCTP, secure communication via TLS for VoIP (voice, video); IPv4 and IPv6; SIMPLE instant messaging and presence with embedded XCAP server and MSRP relay; ENUM; DID and least cost routing; load balancing; routing fail-over; accounting, authentication and authorization; support for many backend systems such as MySQL, Postgres, Oracle, Radius, LDAP, Redis, Cassandra; XMLRPC control interface, SNMP monitoring. It can be used to build large VoIP servicing platforms or to scale up SIP-to-PSTN gateways, PBX systems or media servers like Asterisk™, FreeSWITCH™ or SEMS. Kamailio and the SIP Express Router (SER) teamed up for the integration of the two applications and new development.

via Kamailio SIP Server.

The Difference Between a Firewall and an SBC

If a firewall is a gate, a session border controller is a canal. Whereas a gate can only be opened or shut, canals have a series of trenches which are filled and then released. This buffer allows much more complex checks and adjustments than a simple open or shut gate. A Session Border Controller has some of the layer 2-4 port controls, but where they really shine is in their Layer 7 capabilities.

via 2600hz Blog • The Difference Between a Firewall and an SBC.

Security Researcher Compromises Cisco VoIP Phones With Vulnerability

As part of the demonstration, Cui inserted and removed a small external circuit board from the phone’s Ethernet port — a move he asserted could be accomplished by someone left alone inside a corporate office for a few seconds. He then used his own smartphone to capture every word spoken near the VoIP phone, even though it was still “on-hook.”

via Security Researcher Compromises Cisco VoIP Phones With Vulnerability – Dark Reading.

Orange Finds Its Web Services Voice

The app has been launched for iOS in 95 countries and will be ready for Android early next year. It is free for anyone to download, no matter which mobile network they are on. It enables users to make free high-definition voice calls and send instant messages to other Libon users over mobile or Wi-Fi connections, as well as set up three personalized visual voicemails that can be set to respond to certain individuals or contact groups. In addition, voicemails can be updated with the user’s most recent Twitter of Facebook status messages (converted into a voicemail using a text-to-speech tool — that could be interesting…).

via Orange Finds Its Web Services Voice – 4G/LTE – Telecom News Analysis – Light Reading Mobile.

Skype Planning A Big Social Advertising Upgrade, Starting First With Windows 8

Today the company unveiled Skype Ads for Windows 8, a new initiative it plans to launch formally in 2013 that will see a number of new ad formats enter the service that play on social interactivity. They include promotions that will appear in conversation streams and ways for two people talking to each other to share sponsored content while communicating on the platform. (Yes, it sounds a lot like what Facebook is doing.)

via Skype Planning A Big Social Advertising Upgrade, Starting First With Windows 8 | TechCrunch.

Phonetic attack commands crash bank phone lines

The attacks targeted the DTMF algorithms, which converted user commands into actions, such as pulling customer bank records from databases.

Vulnerabilities in those databases could be exploited by speaking attack commands down the phone. In one instance, Sasi trigged a buffer overflow against a demonstration system.

via Phonetic attack commands crash bank phone lines – Networks – SC Magazine Australia – Secure Business Intelligence.

More information on this from:  DTMF Telephony Denial of Service (TDoS) Issues for IVRs

Since most of these attacks simply involves transmission of DTMF, they are very easy to execute and automate. These vulnerabilities could impact any IVR, whether it is TDM, VoIP, the latest UC, etc.

Voicemail usage plunging

In data prepared for USA Today, Vonage, an Internet phone company, says the number of voice-mail messages left on user accounts was down 8 percent in July from a year ago.

Checking voice mail seems to be an even a bigger chore than leaving a voice message. Retrieved voicemail fell 14 percent among Vonage users in the same period.

via Voicemail usage plunging – Chicago Sun-Times.

Using the Google Nexus 7 Tablet as a Phone, For Free (+ a Privacy Hint)

In short, yes, even though the N7 doesn’t obviously have phone-related user interfaces, you can use the N7 as a phone for both outgoing and incoming calls via VoIP, and this can be accomplished completely for free via Google Voice accounts.

The fairly easy steps:

Obtain and install the GrooVe IP Lite (GIPL) app via Google Play. This version is free and has everything you need for this situation. You still might wish to purchase the full version for $5 to support the fine work of the developer.

via Lauren Weinstein’s Blog: Using the Google Nexus 7 Tablet as a Phone, For Free (+ a Privacy Hint).