May 18, 2008

VOIP Cellphone Security

It's happened to all of us. Your busy, walking through a busy area- talking on your cellphone, when suddenly you get the option to switch to Wi-Fi and save those crucial peak hour minutes. Of course you do! So you switch over, and then gloat about being able to do so to your friend on the other line.
So you think you are the best of the geeks?

What you didn't know, was that the router you just connected to was a fake. Well, technically it was real, however- you gave up any right to privacy when you connected. The administrator of the server has installed software on his server, that will allow him to see all of your calls- bye-bye privacy. When a hacker was asked to demonstrate the methods he used, he explained it like this.

"You can see all the cell phones connected to the base station," he said. "You can't see calls, but people associated with the calls. You can also do location tracking. If you know somebody is on the network you can see how close to the base station they are."

That is possible because the subscriber identifier, which is basically the user identification number, can easily be seen on the traffic, although the identifiers are never supposed to be transmitted in plain text, he said. "I know exactly where you are on the network."

As far as localized calling goes, if you have any point in your company where an attacker can gain access to your network- You will find yourself compromised. While VOIP certainly reduces your phone bill,  initially you have to make up the costs in security implementations. Skype is relatively secure, while Vonage is absolutely open to exploitation.

No comments: