[asterisk-users] Softphone that supports central provisioning?

Mike Lynchfield theclubvoip at gmail.com
Wed Apr 25 11:07:42 MST 2007


may i add , eyebeams confnig file is xml and could be generated , BUT, the
password is hashed in some way.. any idea on that ? its a pretty long hash

On 4/25/07, Senad Jordanovic <senad at bicom.us> wrote:
>
> Andrew Furey wrote:
> > On 24/04/07, Senad Jordanovic <senad at bicom.us> wrote:
> >>> Tzafrir Cohen wrote:
> >>>> Dear Senad,
> >>>>
> >>>> The setup program for your soft phone can be downloaded from here:
> >>>> <a href="http://malwareserver.com/malware.exe">http://LINK</a>
> >>>>
> >>>> During the setup you will be asked for configuration file. Please
> >>>> use attached file.
> >>
> >> Tzafrir is referring to possible link that user can receive from
> >> "someone"...
> >>
> >> Since I was referring to SYSTEM email message generated from within
> >> PBXware, above is not possible without some serious hacking of the
> >> network, the box, the chroot etc... If one is at that level it then
> >> becomes a criminal issue.
> >
> > Not denying the criminal aspect, but who says the email has to really
> > come from that box? If there's one thing SMTP is "good" at, it's
> > allowing forged emails... it wouldn't take a decent phisher 10
> > minutes to craft an email that has all the same content including
> > From addresses.
> >
> > Sure, the full headers would give up the game - but how many of your
> > users would (a) check them, and (b) understand what they're seeing?
> > I'd be surprised if it's more than 5% - and in many cases it only
> > takes one person to fall for it...
> >
> > Andrew
>
> Hi
>
> Yeah, all valid points. Thanks for bringing this up.
> In order to eliminate above the setup program is actually in user self
> care
> on the local box. That is where the link refers to. The user self care is
> password protected.
>
> In addition, all of the above is on LAN. For someone to know there is
> installation going on at "some" LAN is very private matter so anyone
> wanting
> send these emails will have to be psychic.
>
>
> Regards,
>
> Senad
>
>
>
>
> _______________________________________________
> --Bandwidth and Colocation provided by Easynews.com --
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>



-- 
Mike
Sales Manager
http://www.voicemeup.com
Making it happen
1.877.807.VOIP (8647)
1.514.312.7030
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20070425/11e540a3/attachment-0001.htm


More information about the asterisk-users mailing list