[asterisk-biz] [SPAM] RE: Any installations in European Consulates or Embassies?

[C. Savinovich]

Todd, my comment is not intended to point out at any vulnerability in
asterisk (independent if such exists or not).  Rather it is intended to
point out the particularity of the request. To be fair, if someone asked to
know a list of consulates who used Nortel PBXs, or Toshibas PBXs, the
request would raise one of my eyebrows just the same, in lieu of the
peculiarity of it alone.  I could be wrong, but why not factor in social
engineering as dutifully as setting up a firewall. Even if such information
is requested with everyone's best intentions, it is still the kind of info
worth jotting down as it may become helpful to somebody some day.  Just my 2
cents, I hope to make this list 2 cents richer.

CS


-----Original Message-----
From: asterisk-biz-bounces at lists.digium.com
[mailto:asterisk-biz-bounces at lists.digium.com] On Behalf Of John Todd
Sent: Tuesday, September 01, 2009 8:29 PM
To: Commercial and Business-Oriented Asterisk Discussion
Subject: Re: [asterisk-biz] Any installations in European Consulates or
Embassies?


Well, I think that's a bit far-fetched.   Really, really far-fetched.   
Random fishing expeditions for vendors of PBX platforms, which are going to
be on private networks, is inefficient to the point of zero returns.  There
are so many other layers of security that have to be penetrated before the
concept of "Asterisk" is a security element that is even considered...  If
you've seen embassy telecommunications systems in any security-minded
nation, you'd understand that vendor identity for primary platform isn't a
serious consideration.

JT


On Sep 1, 2009, at 2:43 AM, C. Savinovich wrote:

> I would be so paranoid... what if they want that information to see 
> what embassies can be hacked?
>
> CS
>
> -----Original Message-----
> From: asterisk-biz-bounces at lists.digium.com
> [mailto:asterisk-biz-bounces at lists.digium.com] On Behalf Of John Todd
> Sent: Tuesday, September 01, 2009 6:53 PM
> To: Commercial and Business-Oriented Asterisk Discussion
> Subject: [asterisk-biz] Any installations in European Consulates or 
> Embassies?
>
>
> I've got a rather unusual request to discover if any European 
> Consulates are running Asterisk as their PBX platform.  For that 
> matter, are there any embassies that could step forward?  This is for 
> a private query (by another
> consulate) and replies may be privately held if requested, other than 
> informing the end user.  Or they may be public, which would be 
> preferred so we can get various government agencies on the list of 
> reference-able sites.
>
> JT
>

---
John Todd                       email:jtodd at digium.com
Digium, Inc. | Asterisk Open Source Community Director
445 Jan Davis Drive NW -  Huntsville AL 35806  -   USA
direct: +1-256-428-6083         http://www.digium.com/




_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--

AstriCon 2009 - October 13 - 15 Phoenix, Arizona Register Now:
http://www.astricon.net

asterisk-biz mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-biz