Sign up
 Vonage  

       
 
Vonage Forum Menu

Vonage Forums
Vonage VoIP Forum
ElalfZek Posted:
michael kors
backpacks Actress
Rosario Dawson was
recently spotted
greeting
...

In The Forum:
Hard Wiring - Installation
Topic:
michael kors bags 650732700
On Nov 21, 2017 at 05:42:42

ElalfZek Posted:
cheap coach purses
Some sections are
fairly sound,
nevertheless the
general
...

In The Forum:
Hard Wiring - Installation
Topic:
mcm shoulder bag 761727408
On Nov 19, 2017 at 02:16:33

mikebrown Posted:
Hello
there, Please
check out -
http://www.vonage-
forum.com/home-wir
ing-installation-g
uide.html
...

In The Forum:
Hard Wiring - Installation
Topic:
Hardwiring in a Rental House
On Oct 24, 2017 at 22:29:48

mikebrown Posted:
Hello, I think
you should consult
it with the Expert
they can surely
help you
...

In The Forum:
Hard Wiring - Installation
Topic:
Hardwiring in a Rental House
On Jun 24, 2017 at 09:15:34

Haniltery Posted:
For wipe call
history also some
of the offline, in
gengral , it
usually apply to
...

In The Forum:
Vonage
Topic:
How to Delete call history from online account?
On May 09, 2017 at 06:14:26

diana87 Posted:
You have to use
VPN service to
bypass
Geo-restrictions
and get free
access while
...

In The Forum:
Vonage
Topic:
Recent calling problem from Egypt
On May 02, 2017 at 17:28:06

dconnor Posted:
What is the main
number on the
account? And
which one is the
virtual number?
...

In The Forum:
Vonage UK
Topic:
How do you call 999
On Apr 27, 2017 at 18:52:02

Trafford Posted:
Seems like a
simple
question. We
rely exclusively
on a Vonage system
for our
...

In The Forum:
Vonage UK
Topic:
How do you call 999
On Apr 27, 2017 at 10:42:50

diazou Posted:
Hello, It's
compatible with
Android your phone
software
? Thanks!
...

In The Forum:
Vonage
Topic:
IP PBX for small business
On Mar 28, 2017 at 12:42:33

jeddaisg Posted:
Hi all We have
a Vonage VOIP
system for our
office. Lately,
our call quality
...

In The Forum:
Vonage
Topic:
Ethernet Cable; Wiring schematic? 568-B?
On Feb 23, 2017 at 18:33:52


Vonage VoIP Forums

Vonage In The News
Vonage Expands International Presence with Investments in Asia Pacific Region

Vonage to Present at the Oppenheimer 20th Annual Technology, Internet & Communications Conference

Syndication

Vonage Customer Reviews
Salt Lake City: impressions after several months
Salt Lake City: impressions after several months



Review: My First Day With Vonage, Excellent!
Review: My First Day With Vonage, Excellent!



Great Price, No Complaints
Great Price, No Complaints



You need some common sense.
You need some common sense.



Vonage Customer Review: One month with Vonage, and...
Vonage Customer Review: One month with Vonage, and...




Vonage Reviews

Vonage paul248: Those MD5 hashes are the key. The problem is that they are some sort of



paul248: Those MD5 hashes are the key. The problem is that they are some sort of challenge/response system and we don't know the secrets.

As an example of how this sort of thing typically works, something like this would happen.

Server: Generates a token (random chunk of data, serial number, something)

Client: connects to server, and the server tells the client what the challenge (token) is. WIth things like apop, the challenge is the msgid-like string at login. With ppp-chap it is explicitly passed through. I dont know enough about the sip handshake to say what happens here.

Client: takes token from server, and the secret ("password") which is stored internally in the device. client then hashes the combination of token and client secret. Passes the md5 string to the server.

Server: does the same hash operation on the token and what it expects the client to have as the secret. It then compares the two hash values. If they are the same, then the client has proved its identity.

And that is the hard part. The hash is (essentially) irreversible. We will not know what the challenge token will be in advance, it is different each time the client connects. We don't know the secret (password) stored on the client.

We can see the hash each time, but that doesn't help us at all for figuring out the secret password. And we can't reuse the MD5 hash each time, because the server is (or had better be!) using a new challenge token each time.

Of course, the hash can be brute forced and you can try permutations of all possible secrets, but that takes a lot of horsepower. It might be easier to physically attack the device and download the eeprom contents.

If you want to know how hard the secret will be to crack, you might look at existing softphone account passwords. They probably are generated with the same algorithm so you can see how long they might be, what character sets are used, etc.

The interesting weakness in this simple system is that it is completely vulnerable to a man-in-the-middle attack. You can proxy the tokens and responses and neither end will be aware of the computer in the middle.

Anyway, this is not particularly useful to know because you need to figure out how to get the ATA into handshaking mode in order to abuse it to calculate the responses for you. There are so many problems waiting there that it is probably going to be simpler to physically attack the device.

Of course, this is all well into Terms Of Service violation territory if you're a Vonage customer and you could find yourself in hot water.

Interesting thought.. If you are not a Vonage customer and go to a retail store and buy one of the locked retail kits, you haven't yet agreed to the terms of service that you are normally forced to agree to when you activate an account... There isn't even a shrink-wrap license notice on the outside of the box... And the TOS hardcopy inside the box says that "by activating the service, you agree ....." - so in theory if you're not a subscriber, you can do whatever you'd like with it.

It is just a matter of time before somebody pops open a box, extracts the keys and writes a decent sip client emulator that proxies the connections. Sooner or later, somebody will do it and all hell will break loose.

If I was Vonage, I'd be thinking about heading that off that scenario by removing the incentives. ie: providing what their customers want. The attitude of "This is what we provide and you WILL like it!" is part of the reason why people hate their local telcos and why Vonage gets a foot in the door. Finding the same attitudes at the "alternative" is a big let down. Price isn't everything.



Read The Full Thread:

Softphone for Main Unlimited $24.99 Residential Service


To ask simply and directly as possible, why can't you use Softphone software feature
If you would like an official explanation from Vonage then you need to speak with
Thank you very much for your reply.. And what you say could very well be true. In
I don't have SoftPhone, but I'd guess it's partly to discourage you from sharing
I wish they'd figure out something reasonable soon. I'm not buying the 'too many
That doesn't apply to the issue. The question was, why isn't unlimited use of the
I'd happily give them their motorola ATA back and pay the shipping if they'd only
ToddlerTN, I wish I would have worded the subject the way you just did. Very
Actually, what is really damn annoying is that Vonage *do* offer multiple line,
Wow very informative post about the business offerings. I have taken some

peterwemm posted "paul248: Those MD5 hashes are the key. The problem is that they are some sort of" on 03/18/2005

Vonage Service Plans


Vonage VoIP Members
Members List Members
New patsykf3
New Today 0
Yesterday 0
Total 101029

Who Is On Site
Visitors 1
Members 0
Total 1


Vonage VoIP Forum Members:
Login Here
Not a Member? You can Register Here
As a registered member you will have access to the VoIP Speed Test, Vonage Service Announcements and post comments in the
Vonage VoIP Forums

Site Search
 






†AK and HI residents pay $29.95 shipping. ††Limited time offer. Valid for residents of the United States (&DC), 18 years or older, who open new accounts. Offer good while supplies last and only on new account activations. One kit per account/household. Offer cannot be combined with any other discounts, promotions or plans and is not applicable to past purchases. Good while supplies last. Allow up to 2 weeks for shipping. Other restrictions may apply.

1Unlimited calling and other services for all residential plans are based on normal residential, personal, non-commercial use. A combination of factors is used to determine abnormal use, including but not limited to: the number of unique numbers called, calls forwarded, minutes used and other factors. Subject to our Reasonable Use Policy and Terms of Service.

2Shipping and activation fees waived with 1-year agreement. An Early Termination Fee (with periodic pro-rated reductions) applies if service is terminated before the end of the first 12 months. Additional restrictions may apply. See Terms of Service for details.

HIGH SPEED INTERNET REQUIRED. †VALID FOR NEW LINES ONLY. RATES EXCLUDE INTERNET SERVICE, SURCHARGES, FEES AND TAXES. DEVICE MAY BE REFURBISHED. If you subscribe to plans with monthly minutes allotments, all call minutes placed from both from your home and registered ExtensionsTM phones will count toward your monthly minutes allotment. ExtensionsTM calls made from mobiles use airtime and may incur surcharges, depending on your mobile plan. Alarms, TTY and other systems may not be compatible. Vonage 911 service operates differently than traditional 911. See www.vonage.com/911 for details.

** Certain call types excluded.

www.vonage-forum.com is not an official Vonage support website & is independently operated.
All logos and trademarks are property of their respective owners. All comments are property of their posters.
All other www.vonage-forum.com content is © Copyright 2002 - 2013 by 4Sight Media LLC.

Thinking of signing up for Vonage but have questions?
Business and Residential customers can call Toll Free 24 hours a day at: 1-888-692-8074
No Vonage Promotion Code or Coupon Codes are required at www.vonage.com to receive any special,
best Vonage cheap deals, free sign up offers or discounts.

[ | | | | | ]

Vonage Forum Site Maps

Vonage | VoIP Forum | How VoIP Works | Wiring and Installation Page Two | International Rate Plans 2 | Internet Phone
Promotion | Vonage Review | VoIP | Broadband Phone | Free Month | Rebate | Vonnage | Vontage | VoIP | Phone Service
Phone | llamadas ilimitadas a Mexico | Latest News | VoIP Acronyms | Deal | Philippines Globe Phone | Site Maps

The Vonage Forum provides the Vonage sign up Best Offer Promotion Deal.
If you are considering signing up for Vonage and have found our Vonage News, Customer Reviews, Forums
& all other parts of this site useful, please use our Vonage Sign up page.


Vonage VoIP Phone Service is redefining communications by offering consumers
& small business VoIP Internet phones, an affordable alternative to traditional phone service.
The Vonage VoIP Forum Generated This Page In: 0.20 Seconds and Pages In The Last 60 Seconds
The Vonage VoIP Forum