Matasano Chargen - Latest Comments in VoIP Demystified: SIP

Re: VoIP Demystified: SIP

sohbet — Tue, 30 Jun 2009 09:59:25 -0000

SOHBET
BURSA SOHBET
ISTANBUL CHAT
ISLAMI CHAT
IZMIR CHAT
ANKARA ARKADAS
ALMANYA CHAT
TURKEY CHAT
MYNET
SITENE EKLE
VIDEO KLIP IZLE
YEMEK TARIFLERI

Re: VoIP Demystified: SIP

StatlerAndWaldorf — Tue, 23 Dec 2008 05:24:15 -0000

I'd like to take this opportunity while the blog is online to let the security community at large know that my fridge magnets were received. Bit slow to ship, and the whereabouts of the Clamato are still unknown.

Product as described, seller provided tracking number. Good eBayer, would buy again.

Re: VoIP Demystified: SIP

root@matasano.com — Tue, 16 Dec 2008 00:20:00 -0000

OMG Matasano is BAQ!

Try not to screw it up this time Tom let the rest of your team stick to core tech topics and leave the drama at home

Re: VoIP Demystified: SIP

Eric Monti — Tue, 07 Oct 2008 12:20:51 -0000

SIP does support authentication using challenge-response, and this is somewhat effective against some UDP spoofing attacks (assuming it's properly implemented).

It's also technically possible to use TLS with SIP, but I am not aware of a standard implementation which is supported amongst different vendors.

Re: VoIP Demystified: SIP

wbrown — Mon, 06 Oct 2008 11:38:57 -0000

There are some mechanisms in place for protecting SIP. One of which is to allow the SIP clients to only talk to a SIP proxy. But then the onus of the protection moves towards the SIP proxy -- and they are typically configured as proxies rather than firewalls. And it doesn't really solve the issue of poor SIP protocol implementations.

Re: VoIP Demystified: SIP

penjuin — Sat, 04 Oct 2008 03:56:37 -0000

This is great! I just have one question: you keep talking about address spoofing and it seems like a real issue for SIP. Is there some sort of certificate/secure tunnel mechanism in the works?