[Asterisk-Users] SIP Firmware for Cisco Phones

[Christoph Frei]

Hi Andrea,

Andrea Venturi wrote:

> that since 5.0 the binary image is signed and you won't be able to 
> downgrade anymore..
> i'm wondering which security concerns are driving this "feature".. 

TCPA is calling. I guess we will see a lot more "secured" hardware in 
the future ;-(

> IMHO the main security issue should be don't trust tftp as a transfer 
> protocol to download "user&pwd" and dial-plansin an ASP voip provider 
> world, but who know 

Yeah right. Secure the engine of your car, but leave the doors unlocked 
and the key in the ignition...

> do you know if someone tried to "reverse engineer" or "enhance" the 
> cisco ip phone firmware?

I think they don't want to wait for someone to develope an "alternative" 
firmware and stop it right
now. A linux-firmware would be really cool, but they want you to pay for 
their proprietary firmware.

I don't think it's possible to program a new Firmware from scratch, but 
if someone could proove
me wronk, i'd be happy to test it ;-)

BTW: Are there any (beside the Snom) IP-Phones with an open-source 
firmware?

Greetings

Chris