While this isn’t about VoIP, per se, there’s a new version of an Internet-Draft out, draft-ietf-tcpm-icmp-attacks, about how ICMP can be used to attack TCP. The abstract is:This document discusses the use of the Internet Control Message Protocol (ICMP) to perform a variety of attacks against the Transmission Control Protocol (TCP). [...]

To most in the security industry these words bring to mind attack and defense of the electronic communications and control of military assets and sensitive government institutions and information. Government vs. government. The US government recognizes this as a developing threat and has undertaken steps to prepare for possible cyber war scenarios. But recent press [...]

The holidays are over, time to focus on the new year ahead. For some the holidays provide a little more time – as others are busy preparing for the holidays – to research, review and ‘catch up’ on security news and trends from around the industry.
I have always been an advocate for security awareness in the small to medium business (SMB) space. Working in this field I have come to understand the balance between equipment and resources cost and the margins which SMB’s operate within to remain viable. Calls for increasing security can appear to negatively impact this balance. Unfortunately the SMB space is becoming an increasingly popular target for internet criminals as witnessed by these two recent articles.

http://www.krebsonsecurity.com/2010/01/fbi-investigating-theft-of-500000...

http://www.wired.com/threatlevel/2009/12/feds-warn-small-businesses/

VoiceCRM.com will
give free Magic Jack voice adapters and service to subscribers of their namesake Voice
CRM service. The Voice CRM service works with any phone system, but now annual subscribers
will receive a free Magic Jack adapter and also 1 year of Magic Jack service with
annual subscriptions to VoiceCRM.com.

VoiceCRM.com and Magic Jack turn any broadband-enabled PC into a virtual call center
workstation, together providing advanced customer relationship management and sales
force automation software with free calling and integrated dialing, call management
and call center features with Magic Jack. Never pay for a phone bill again, plus automate
your business and sales with powerful CRM software.

Most of us are familiar with the information disclosure risks associated with devices like phones and ATAs on the Internet, and this has been mentioned in presentations like Endler/Collier at BlackHat in 2006. However, the recent emergence of Shodan significantly raises the exposure of these devices, especially embedded systems.

Shodan bills itself as a “Computer Search Engine” and some folks have raised questions about the impact, ethics, etc. So far, Shodan has remained under-the-radar, but I expect we’ll see more coverage and questioning of what value-add this service provides to security efforts.

Technology
Marketing Corporation announces that the VoIP
Equipment channel, sponsored by VoIP
Supply, has been launched as the newest addition to the TMCnet channel program.

The VoIP Equipment channel promotes an array of VoIP equipment and solutions available
from VoIP Supply. In addition, visitors can find valuable resources such as product
guides, testimonials, feature articles and industry news.

FreedomVOICE announced that Cory Dzbinski, Director of Sales Engineering at FreedomVOICE, will be speaking
on HD Voice at this year’s 2010 International CES, the world's largest consumer technology
tradeshow.

With over 11 years of telecom & IT experience, Cory Dzbinski has played a vital
role in spearheading the introduction and adoption of the FreedomVOICE Toll Free Number
Service, a small business virtual communication platform, and the FreedomIQ
Hosted VoIP PBX, a rapidly growing hosted VoIP business phone system. Now focusing
his efforts on HD Voice, Dzbinski has become a pioneer and industry expert in the
voice quality standard.

Discussion topics at the CES HD Voice Summit have been formulated to address the real
issues surrounding the wide adoption of the technology. Topics include profitability
and HD voice, HD Voice technology requirements, integrating cell phones and cordless

Junction Networks announces that its OnSIP Virtual
PBX is now the first Hosted PBX Service to support HD voice on all on-network and
conference bridge calls. OnSIP is now wideband-ready, using SIP compliant, wideband
telephony endpoints and conveys the kind of high-definition, in-the-room sound quality
that is the next best thing to being there. Further, these high-quality HD calls will
continue to be free on-net, thus further reducing telephone costs, while at the same
time, offering additional features to users.

Skype announces
support for Skype video calls on PCs in 720p HD, as well as Skype software embedded
into Internet-connected widescreen televisions from its consumer electronics manufacturer
partners.

High Definition Skype Video Calling

The latest version of Skype for Windows can deliver up to 720p HD-quality video calling

SRS
Labs announces the addition of SRS Premium Voice, the company's latest innovative
voice solution, which provides superior voice communications quality and intelligibility
during both audio-only and video conferencing VoIP calls on a PC at both ends of the
call, across laptop speakers, desktop speakers, headphones and within a wide variety
of noisy environments.