{"id":7482,"date":"2008-12-08T20:52:48","date_gmt":"2008-12-08T20:52:48","guid":{"rendered":"http:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/e-commerce\/the_fbi_accidentally_drizzles_on_digiums_parade.html"},"modified":"2008-12-08T20:52:48","modified_gmt":"2008-12-08T20:52:48","slug":"the-fbi-accidentally-drizzles-on-digiums-parade","status":"publish","type":"post","link":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/technology\/the-fbi-accidentally-drizzles-on-digiums-parade.html","title":{"rendered":"The FBI Accidentally Drizzles on Digium&#8217;s Parade"},"content":{"rendered":"<p><meta content=\"text\/html; charset=utf-8\" http-equiv=\"Content-Type\"><meta content=\"Word.Document\" name=\"ProgId\"><meta content=\"Microsoft Word 12\" name=\"Generator\"><meta content=\"Microsoft Word 12\" name=\"Originator\"><link href=\"file:\/\/\/C:%5CUsers%5CRTEHRA%7E1.NTD%5CAppData%5CLocal%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_filelist.xml\" rel=\"File-List\" \/><link href=\"file:\/\/\/C:%5CUsers%5CRTEHRA%7E1.NTD%5CAppData%5CLocal%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_themedata.thmx\" rel=\"themeData\" \/><link href=\"file:\/\/\/C:%5CUsers%5CRTEHRA%7E1.NTD%5CAppData%5CLocal%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_colorschememapping.xml\" rel=\"colorSchemeMapping\" \/><!--[if gte mso 9]><xml>\nNormal\n0false\nfalse\nfalse\nEN-US\nX-NONE\nX-NONE\nMicrosoftInternetExplorer4\n<\/xml><![endif]--><!--[if gte mso 9]><![endif]--><\/p>\n<style type=\"text\/css\">\n<!--\n\/* Font Definitions *\/\n@font-face\n{\"Cambria Math\";\npanose-1:2 4 5 3 5 4 6 3 2 4;}\n@font-face\n{\npanose-1:2 15 5 2 2 2 4 3 2 4;}\n\/* Style Definitions *\/\np.MsoNormal, li.MsoNormal, div.MsoNormal\n{\nmso-style-parent:\"\";\nmargin-top:0in;\nmargin-right:0in;\nmargin-bottom:10.0pt;\nmargin-left:0in;\nline-height:115%;\nfont-size:11.0pt;\"Calibri\",\"sans-serif\";\nmso-bidi-\"Times New Roman\";}\na:link, span.MsoHyperlink\n{\ncolor:blue;\ntext-decoration:underline;\ntext-underline:single;}\na:visited, span.MsoHyperlinkFollowed\n{\ncolor:purple;\ntext-decoration:underline;\ntext-underline:single;}\n.MsoChpDefault\n{\nmso-bidi-\"Times New Roman\";}\n.MsoPapDefault\n{\nmargin-bottom:10.0pt;\nline-height:115%;}\n@page Section1\n{size:8.5in 11.0in;\nmargin:1.0in 1.0in 1.0in 1.0in;}\ndiv.Section1\n{page:Section1;}\n-->\n<\/style>\n<p><!--[if gte mso 10]>\n\n\n<style>\n\/* Style Definitions *\/\ntable.MsoNormalTable\n{mso-style-name:\"Table Normal\";\nmso-style-parent:\"\";\nline-height:115%;\nfont-size:11.0pt;\"Calibri\",\"sans-serif\";}\n<\/style>\n\n\n<![endif]-->  <\/p>\n<div><span style=\"display: inline;\" class=\"mt-enclosure mt-enclosure-image\"><img loading=\"lazy\" decoding=\"async\" height=\"50\" width=\"157\" style=\"margin: 0pt 20px 20px 0pt; float: left;\" class=\"mt-image-left\" src=\"http:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/uploads\/digium-asterisk.gif\" alt=\"\" \/><\/span>There has been some recent madness in the open source communications world and I thought I had to get involved to get the matter settled properly. Some media outlets reported on the fact that the FBI put out a vague statement via the <a href=\"http:\/\/www.ic3.gov\/default.aspx\">IC3<\/a> regarding how Asterisk may be susceptible to vishing attacks or caller ID spoofing via VoIP.<\/div>\n<p>Before commenting I waited to hear back from Digium&#8217;s John Todd who explained that there were some methodology and editorial process issues in this alert &#8211; basically no one checked with Digium before going public. As it turns out, after checking with Digium, the FBI quickly revised their statement and everything is fine.<\/p>\n<p>The details are that there was a bug which Digium found in March of 2008 and subsequently patched in version 1.2 and 1.4. Version 1.6 is not affected. Besides, according to Todd, the security issue would arise if system administrators basically disregarded logical security measures like using numerals in passwords.<\/p>\n<p>For your reference you may want to check out the blog entry from Todd titled <a href=\"http:\/\/blogs.digium.com\/2008\/12\/06\/sip-security-and-asterisk\/\">SIP Security and Asterisk<\/a> as well as the updated <a href=\"http:\/\/www.ic3.gov\/media\/2008\/081205-2.aspx\">IC3 warning<\/a> from the FBI.<\/p>\n<p>I am sure by the time <a href=\"http:\/\/www.tmcnet.com\/voip\/conference\/east-09\/digium-asterisk-world.htm\">Asterisk World<\/a> rolls around in a few months in Miami, we will all be laughing about this incident and marveling at the opportunity that is open source communications.<\/p>\n<p>    <\/meta><\/meta><\/meta><\/meta><\/p>\n","protected":false},"excerpt":{"rendered":"<p>There has been some recent madness in the open source communications world and I thought I had to get involved to get the matter settled properly. Some media outlets reported on the fact that the FBI put out a vague statement via the IC3 regarding how Asterisk may be susceptible to vishing attacks or caller<\/p>\n","protected":false},"author":44,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[171,179,199,198,156,189,118,177,191],"tags":[],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/posts\/7482"}],"collection":[{"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/users\/44"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/comments?post=7482"}],"version-history":[{"count":0,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/posts\/7482\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/media?parent=7482"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/categories?post=7482"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/tags?post=7482"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}