 |
 | Vonage Forum Menu |
| | |
| Vonage Forums |
|
|
| | | |
| Vonage In The News |
| | |
| Vonage Customer Reviews |
| | |
| |
Vonage Since quite a few people have replied to this thread saying that they're not worried
Since quite a few people have replied to this thread saying that they're not worried about someone reassembling their voice conversations and stealing their credit card numbers, I'd like to propose some more practical concerns about Voip insecurity.
1. That someone will co-opt the identity of your Voip adaptor and make lots of phone calls on your phone bill. Since the service is obviously "secure", you "must" have made those phone calls, and you will be expected to pay for them, right? Note that while domestic phone calls are cheap, there are still some international calls which cost real money even through Vonage. Not to mention the ongoing nuisance of having to challenge the fraudulent calls for as long as they keep appearing on your account, possibly forcing you to change your phone number...
2. That someone will use any arbitrary Voip service - not yours in particular - to activate the credit card that they just fraudulently got in your name (or more likely stole out of your physical mailbox) by having their Voip service spoof your home phone number, which is obviously "secure" so you "must" have been the one making the phone call to activate the (stolen) credit card, right? Of course, Voip is only one mechanism by which your home phone number can be spoofed to a credit card activation system. Some mobile phones suffer this problem, and anyone with a PBX can do it too. Still, like many things, it's easiest on the Internet...
3. Someone already mentioned this one, but I'll put it back out here since it is in my list of likely security compromises to be performed care of Voip: Someone targets a business which takes credit card numbers all day long over Voip. The attacker records several days' worth of packets and reassembles the conversations, then listens through those recorded conversations and writes down hundreds of credit cards, maybe yours included. Then in short order all of those credit cards are maxed out with fraudulent purchases. Someone commented that they're not concerned about that because their direct liability is limited to $50 for fraudulent charges on their credit card. That's true. It does not take in to account that every single credit card purchase you make (and for that matter, every singly purchase you make by any means from any merchant which accepts credit cards, unless they charge extra fees only on credit card purchases to cover the processing fees) contains an amount in the credit card processors' fees to cover all of that >$50 liability from fraudulent charges. Did you know that when you buy something with a credit card, anywhere from 0.5% to 7% of your purchase is given up by the store to the credit card processors, issuers, banks &etc in processing fees? And some of every processing fee necessarily goes to cover fraud perpetrated by whomever against all whatever credit cards - not just yours. Nearly every purchase you make is higher because of credit card fraud, because the stores have to raise all of their prices to cover those credit card processing fees, so you should be concerned about anyone's credit card being stolen, not just yours, despite the $50 direct liability cap we all enjoy.
-Jay Libove, CISSP
Atlanta, GA, US
Read The Full Thread: Security: Lack of response from customercare...
• What's the procedure to cancel the service, just call the main number and say i
• Anyone taking the time and energy to rebuild and listen to my conversations is
• That's where you're mistaken, if vonage is your only service, or you mistakenly
• Like I said. While this may be a concern for you, anyone that expends the time and
• Maybe Maxwell Smart could loan you "The Cone Of Silence" :-D
Seriously, if security
• True, and I'd be willing to pay more money. The thing that really pisses me off is
• As far as I know it is secure...You have SIP which initiates the call and then RTP
• :twisted: I'm busily surrounding my house with lead and searching for hidden
• If you'd like, i can provide a step by step demonstration of how easy it is utilizing
• If you'd like, I can take you to the cross-box and show you how to put your butt-set
libove posted "Since quite a few people have replied to this thread saying that they're not worried" on 04/24/2005 |
|
|
| |
| Vonage Service Plans |
| | |
| Vonage VoIP Members |
| | |
| Vonage Stock Price |
|
Value: 2.75
Change:  -0.03
Up to 15 Minute Delay | | | |
| Site Search |
| | |
|
|
Vonage VoIP Phone Service is redefining communications by offering consumers
& small business VoIP Internet phones, an affordable alternative to traditional phone service.
The Vonage VoIP Forum Generated This Page In: 0.39 Seconds and 306 Pages In The Last 60 Seconds
The Vonage VoIP Forum
|
Members
New 
New Today 24
Yesterday 36
Total 71294
Who Is On Site
Visitors 180
Members 2
Total 182