Sign up
 Vonage  

       
 
Vonage Forum Menu

Vonage Forums
Vonage VoIP Forum
Dwightkaw Posted:
kredyt bez
zaświadcze
24; kredyt bez
zaświadcze
24; o dochodach
...

In The Forum:
Vonage
Topic:
kredyt bez zaświadczeń
On Dec 03, 2016 at 03:27:10

Kevingrarl Posted:
Су
95;ас&
#1085;иl
1;
пі
76;пр&
#1080;&
...

In The Forum:
Vonage
Topic:
Сучас&
On Dec 02, 2016 at 12:51:38

IsaawUnace Posted:
does cialis work
as well as cialis
add.cgi buy
cialis cialis
the team <a
...

In The Forum:
Vonage
Topic:
Condition good pill instead of ed
On Dec 01, 2016 at 11:11:59

MatrickVop Posted:
buy cialis today
columbus oh
generic cialis
buy cialis online
registered users
...

In The Forum:
Vonage
Topic:
Classify miserly pills no means
On Nov 28, 2016 at 10:42:47

dracossumo Posted:
Ко
84;па&
#1085;иn
3; Tritel
пр
77;до
...

In The Forum:
Vonage
Topic:
&#1048;&#1085;&#1090;&#1077;&#1088;&
On Nov 27, 2016 at 23:00:39

DWSupport Posted:
After recent
Vonage update that
took place on the
4th and 5th of
Nov. E-mails with
...

In The Forum:
Vonage
Topic:
Voicemail Not Forwarding to Outlook Accounts
On Nov 10, 2016 at 12:23:26

peterlee Posted:
Had a call from a
Hospital in Ajax,
Ontario to my home
in
Scarborough, Onta
rio
...

In The Forum:
Vonage Canada
Topic:
Hospital Incoming call unable to connect
On Nov 08, 2016 at 11:59:50

TELLDOUG Posted:
I am looking for a
product that will
make my phone ring
louder so I can
hear using
...

In The Forum:
Vonage
Topic:
Looking for a ringer ameliorate
On Oct 26, 2016 at 09:21:30

HildBeft Posted:
You can recollect
password by
connecting the
router to your pc
and open the
browser
...

In The Forum:
Hard Wiring - Installation
Topic:
How to arrive at wifi password?
On Oct 20, 2016 at 05:05:49

HildBeft Posted:
Great tips..
Thanks for sharing
...

In The Forum:
Hard Wiring - Installation
Topic:
How to have Vonage and another land line?
On Oct 20, 2016 at 04:55:03


Vonage VoIP Forums

Vonage In The News
Vonage Holdings Corp. Reports Fourth Quarter and Full Year 2013 Results

Carolyn Katz Elected to Board of Directors of Vonage Holdings Corp.

Syndication

Vonage Customer Reviews
Vonage vs. Time Warner Cable SoCal
Vonage vs. Time Warner Cable SoCal



Vonage UK Review
Vonage UK Review



Vonage Pros and Cons for 2006
Vonage Pros and Cons for 2006



Vonage, a VT2142 and a RTP300, My Experiences - A Detailed Review
Vonage, a VT2142 and a RTP300, My Experiences - A Detailed Review



Salt Lake City: impressions after several months
Salt Lake City: impressions after several months




Vonage Reviews


Post new topic   Reply to topic  Vonage® VoIP Forum - Vonage News, Reviews And Discussion » Vonage Forum Archive
Author Message
dconnor
Site Admin
Site Admin


Joined: Mar 05, 2003
Posts: 2263
Location: The Beach

PostPosted: Tue May 24, 2005 7:20 pm    Post subject: Oh no, I smell flames Reply with quote Back to top

Gentlemen / Ladies:

We have an excellent thread going here, let's keep it that way. The name calling and provoking of flames is uncalled for.

Peace

_________________
Have Questions? Need to speak to Vonage before signing up?
Call: 1-888-692-8074
Both Business and Residential customers can call and speak to a Vonage Sales Rep 24 hours a day.
View user's profile Send private message Visit poster's website
matth
Vonage Forum Master
Vonage Forum Master


Joined: Dec 07, 2004
Posts: 281
Location: Williamsport, PA

PostPosted: Tue May 24, 2005 7:34 pm    Post subject: Reply with quote Back to top

ToddlerTN wrote:
I'm halfway tempted to give out my IP address and challenge any of you guys to grab a phone call. It's simply not something worth worrying about to me when there are so many other ways to obtain the same information.


Correct.. they would have to be a network admin on the network you use... someone in Sanfrancisco can't do anything with your packets unless they go through the router the admin has admin use over.

Joe user on cox cable can't listen in to me on Verizon DSL.
View user's profile Send private message Visit poster's website AIM Address
matth
Vonage Forum Master
Vonage Forum Master


Joined: Dec 07, 2004
Posts: 281
Location: Williamsport, PA

PostPosted: Tue May 24, 2005 7:44 pm    Post subject: Reply with quote Back to top

GardRailz wrote:
Here's a quick update that i've been meaning to do since Saturday...

I spoke with one of the technical people and he attempted to assure me that the voice traffic was encrypted. When I told him I've decoded a call that I made to an automated service, he continued to say, Oh no, it's encrypted. When I asked him if he could give me permission to capture our call for demonstration purposes, he agreed, then put me on hold about 30 seconds later. When he came back, he said that the RTP and SIP packets are unencrypted. The only encryption, or customization they use for their protocol is with the actual device authentication to their gateways.

After we spoke more about the problem, and the possible fixes, he decided to place my contact information inside the ticket because I had some potential ideas as to how to effectively deal with these issues. I doubt i'll get a call back, but hey, it was nice to actually hear someone say "You're right, it's unencrypted...".

He said that the general support people there genuinely feel that the traffic is secure, and really don't know anything about encryption or electronic eavesdropping. They need training badly....

So, in a nutshell, the conversations are unencrypted. If you buy a business plan, you're only paying for additional usage, not encryption. If you ever run the chance of discussing private matters over the phone, Voice over IP (VoIP) may not be the technology for you. They do have plans on switching things to SRTP, however that wont be happening in the future.

on a side note, I did find out that they are beta-testing the 'call block' feature, which would disallow callers with 'out of area', or 'private' listed in their caller id. All i have to say about that feature is "YAAAAAAAAAAAAAAAAAAAAAAAY!!!"

Voip == insecure still. Hopefully it will be taken seriously in the near future.


You have got serious issues. Voip is just as secure (if not more) then a POTS line.

POTS line == climb a pole or go to the NID.. call captures
Voip == have to be an admin/hacker on a router/bridge device somewhere on the network.

As I stated above.. someone on cox cable can't access my call on ChiliTech Wireless, or Verizon DSL.

Let's look at my tracert:

1 1 ms 1 ms 1 ms 192.168.1.1
2 6 ms 8 ms 7 ms ws-65-173-16-1.wireless.chilitech.net [65.173.16
1]
3 14 ms 13 ms 14 ms sl-gw22-pen-6-1-0.sprintlink.net [160.81.248.77]

4 13 ms 14 ms 15 ms sl-bb26-pen-0-4.sprintlink.net [144.232.5.25]
5 13 ms 15 ms 13 ms sl-bb21-pen-9-0.sprintlink.net [144.232.5.245]
6 20 ms 15 ms 15 ms sl-bb23-rly-0-0.sprintlink.net [144.232.20.32]
7 18 ms 18 ms 21 ms sl-st20-ash-10-0.sprintlink.net [144.232.20.152]

8 19 ms 17 ms 17 ms 144.232.8.18
9 18 ms 19 ms 18 ms so6-0-0-2488m.ar1.nyc1.gblx.net [67.17.64.154]
10 24 ms 18 ms 21 ms vonage-holdings-corp-vonage-toll-free-nwrk.ge-2-
-0.403.ar1.nyc1.gblx.net [64.210.19.18]

I am 10 hops from Vonage. To listen in to my call you would have to be an employee/hacker of Sprintlink or GlobalCrossings (or Vonage). So unless you are an admin or hacker ON ONE OF THOSE ROUTERS listed above.. you can't listen to my call. Just because your connection goes THROUGH one of those routers... you can't listen to my call. You have to be ON one of those routers to capture packets...

Oh yeah.. my phone calls are available from 65.173.16.202 go for it Rolling Eyes
View user's profile Send private message Visit poster's website AIM Address
dconnor
Site Admin
Site Admin


Joined: Mar 05, 2003
Posts: 2263
Location: The Beach

PostPosted: Tue May 24, 2005 7:49 pm    Post subject: Reply with quote Back to top

Mine is 127.0.0.1

Hack away, hit it hard!!!

Smile

_________________
Have Questions? Need to speak to Vonage before signing up?
Call: 1-888-692-8074
Both Business and Residential customers can call and speak to a Vonage Sales Rep 24 hours a day.
View user's profile Send private message Visit poster's website
matth
Vonage Forum Master
Vonage Forum Master


Joined: Dec 07, 2004
Posts: 281
Location: Williamsport, PA

PostPosted: Tue May 24, 2005 7:57 pm    Post subject: Reply with quote Back to top

Hey! I got in.. woohoo.... hrmm wow... dan.. what have you been doing.. you've got tons of pirated software on here! Hey hrmmm I've downloaded almost all of these files as well! You have good taste!
View user's profile Send private message Visit poster's website AIM Address
GardRailz
Full Forum Member
Full Forum Member


Joined: Jan 30, 2005
Posts: 73
Location: WV

PostPosted: Wed May 25, 2005 5:41 am    Post subject: Reply with quote Back to top

matth wrote:
ToddlerTN wrote:
I'm halfway tempted to give out my IP address and challenge any of you guys to grab a phone call. It's simply not something worth worrying about to me when there are so many other ways to obtain the same information.


Correct.. they would have to be a network admin on the network you use... someone in Sanfrancisco can't do anything with your packets unless they go through the router the admin has admin use over.

Joe user on cox cable can't listen in to me on Verizon DSL.


That's what I thought I've been saying throughout this entire thread Smile It's people on your network, or the networks that your provider's connect to. Individuals who have access, or obtain unauthorized access to the networks that connect to vonage's servers pose the greatest risk.

Since I don't have access to the networks that interconnect vonage's servers, I cannot confirm that the interconnects are encrypted. Lets just trust them on that (and I hate to use the word trust). I'm basing my statements on what I've seen, and what other upstream providers can see.
View user's profile Send private message
GardRailz
Full Forum Member
Full Forum Member


Joined: Jan 30, 2005
Posts: 73
Location: WV

PostPosted: Wed May 25, 2005 5:56 am    Post subject: Reply with quote Back to top

matth wrote:
You have got serious issues. Voip is just as secure (if not more) then a POTS line.

POTS line == climb a pole or go to the NID.. call captures
Voip == have to be an admin/hacker on a router/bridge device somewhere on the network.


POTS== it's obvious when people climb poles, or fuss with lines around your house or business. That's probably the most insecure portion of the POTS network. Everywhere else you have to be an employee, or granted special access.

VoIP== more discrete, you don't have to physically sit at the house to listen in on conversations.

Remember, this thread is a warning of potential security issues relating to unencrypted traffic. There have been people on this thread that have asked for me to document or provide documentation of this happening out in the wild. All the security buffer overflows within operating systems and applications that have patches and bug-fixes may not have been exploited yet, but they've been fixed before they have been exploited. Do you think Microsoft, Oracle, or other large companies would just let buffer overflows remain in their product until they've been exploited? Would that be practicing "due diligance/due care"?

matth wrote:

As I stated above.. someone on cox cable can't access my call on ChiliTech Wireless, or Verizon DSL.

Let's look at my tracert:

1 1 ms 1 ms 1 ms 192.168.1.1
10 24 ms 18 ms 21 ms vonage-holdings-corp-vonage-toll-free-nwrk.ge-2-
-0.403.ar1.nyc1.gblx.net [64.210.19.18]

I am 10 hops from Vonage. To listen in to my call you would have to be an employee/hacker of Sprintlink or GlobalCrossings (or Vonage). So unless you are an admin or hacker ON ONE OF THOSE ROUTERS listed above.. you can't listen to my call. Just because your connection goes THROUGH one of those routers... you can't listen to my call. You have to be ON one of those routers to capture packets...

Oh yeah.. my phone calls are available from 65.173.16.202 go for it Rolling Eyes


You're correct. You must have admin access in order to capture traffic on a network further upstream. That administrative access can either be granted by the organization, or obtained via unauthorized means. This thread wasn't meant to say "Hey, you ARE being listened to.", it's to let you know that "Hey, there's a potential for people to listen further up stream."

I believe if I go through all the posts in this thread that i've made, i've stated that upstream providers can listen to your traffic, not people running a sniffer in singapore on their local machine, listening to their own traffic. that individual must have access to the packets that's traversing your upstream provider's network.

I'll have to draw up a Visio drawing and post it to illustrate my statements. There has been a few misunderstandings, and violent agreements relating to points I'm trying to bring to the public's attention.
View user's profile Send private message
GardRailz
Full Forum Member
Full Forum Member


Joined: Jan 30, 2005
Posts: 73
Location: WV

PostPosted: Wed May 25, 2005 6:00 am    Post subject: Reply with quote Back to top

[quote="dconnor']Mine is 127.0.0.1

Hack away, hit it hard!!!

Smile
matth wrote:
Hey! I got in.. woohoo.... hrmm wow... dan.. what have you been doing.. you've got tons of pirated software on here! Hey hrmmm I've downloaded almost all of these files as well! You have good taste!

[/quote]



heh my ip address is 2.224.128.5. Have at it Smile
View user's profile Send private message
matth
Vonage Forum Master
Vonage Forum Master


Joined: Dec 07, 2004
Posts: 281
Location: Williamsport, PA

PostPosted: Wed May 25, 2005 6:13 am    Post subject: Reply with quote Back to top

Hrmm just a note.. I don't condone pirated software.. that was a joke Razz

GardRailz... ok I see your point... I still would feel better with a Voip line then a pots line.... even if joe kid can't listen... someone at the CO can punch a few keys and listen in on your conversation.... believe me... I've done trouble shooting on our PRIs at work .. I've seen it happen (authorized by me of course...) to locate a problem channel.

So I dunno I guess it's just one opinion against the other. Yes SRTP would be best.
View user's profile Send private message Visit poster's website AIM Address
robertplattbell
Vonage Forum Senior
Vonage Forum Senior


Joined: May 05, 2005
Posts: 90

PostPosted: Wed May 25, 2005 8:03 am    Post subject: Reply with quote Back to top

I'm going by what you have already admitted right here in this thread.

You have said yourself that there is no documented case of anyone anywhere hacking Voip or even e-mails in the manner you describe.

You argue that this *might* be technically possible, but for some reason no one has bothered to do it.

Then you go on to bash Vonage because some 25-cents-per-hour call center employee in Bangalore cannot answer esoteric questions about Voip security.

You realy do sound like a government employee!

Now just go away and have fun with your telco lines.

Sorry, but I'm an EE, not some IT hack. Can't pull the wool over my eyes.
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


All times are GMT - 5 Hours

Vonage Service Plans


Vonage VoIP Members
Members List Members
New WhalloSek
New Today 4
Yesterday 9
Total 98999

Who Is On Site
Visitors 95
Members 0
Total 95


Vonage VoIP Forum Members:
Login Here
Not a Member? You can Register Here
As a registered member you will have access to the VoIP Speed Test, Vonage Service Announcements and post comments in the
Vonage VoIP Forums

Vonage Stock Price
Value: 6.57
Change:   N/A
Up to 15 Minute Delay

Site Search
 






†AK and HI residents pay $29.95 shipping. ††Limited time offer. Valid for residents of the United States (&DC), 18 years or older, who open new accounts. Offer good while supplies last and only on new account activations. One kit per account/household. Offer cannot be combined with any other discounts, promotions or plans and is not applicable to past purchases. Good while supplies last. Allow up to 2 weeks for shipping. Other restrictions may apply.

1Unlimited calling and other services for all residential plans are based on normal residential, personal, non-commercial use. A combination of factors is used to determine abnormal use, including but not limited to: the number of unique numbers called, calls forwarded, minutes used and other factors. Subject to our Reasonable Use Policy and Terms of Service.

2Shipping and activation fees waived with 1-year agreement. An Early Termination Fee (with periodic pro-rated reductions) applies if service is terminated before the end of the first 12 months. Additional restrictions may apply. See Terms of Service for details.

HIGH SPEED INTERNET REQUIRED. †VALID FOR NEW LINES ONLY. RATES EXCLUDE INTERNET SERVICE, SURCHARGES, FEES AND TAXES. DEVICE MAY BE REFURBISHED. If you subscribe to plans with monthly minutes allotments, all call minutes placed from both from your home and registered ExtensionsTM phones will count toward your monthly minutes allotment. ExtensionsTM calls made from mobiles use airtime and may incur surcharges, depending on your mobile plan. Alarms, TTY and other systems may not be compatible. Vonage 911 service operates differently than traditional 911. See www.vonage.com/911 for details.

** Certain call types excluded.

www.vonage-forum.com is not an official Vonage support website & is independently operated.
All logos and trademarks are property of their respective owners. All comments are property of their posters.
All other www.vonage-forum.com content is © Copyright 2002 - 2013 by 4Sight Media LLC.

Thinking of signing up for Vonage but have questions?
Business and Residential customers can call Toll Free 24 hours a day at: 1-888-692-8074
No Vonage Promotion Code or Coupon Codes are required at www.vonage.com to receive any special,
best Vonage cheap deals, free sign up offers or discounts.

[ | | | | | ]

Vonage Forum Site Maps

Vonage | VoIP Forum | How VoIP Works | Wiring and Installation Page Two | International Rate Plans 2 | Internet Phone
Promotion | Vonage Review | VoIP | Broadband Phone | Free Month | Rebate | Vonnage | Vontage | VoIP | Phone Service
Phone | llamadas ilimitadas a Mexico | Latest News | VoIP Acronyms | Deal | Philippines Globe Phone | Site Maps

The Vonage Forum provides the Vonage sign up Best Offer Promotion Deal.
If you are considering signing up for Vonage and have found our Vonage News, Customer Reviews, Forums
& all other parts of this site useful, please use our Vonage Sign up page.


Vonage VoIP Phone Service is redefining communications by offering consumers
& small business VoIP Internet phones, an affordable alternative to traditional phone service.
The Vonage VoIP Forum Generated This Page In: 0.74 Seconds and 643 Pages In The Last 60 Seconds
The Vonage VoIP Forum