It Is Now Safe to Compile Your Phone System
Rich Bodo - It is Now Safe to Compile your Phone System The telephony industry was late to adopt open-source software and commodity protocols.
Summary
Architecture and Background
Rich Bodo - It is Now Safe to Compile your Phone System The telephony industry was late to adopt open-source software and commodity protocols. The open-source development community is rapidly correcting that problem. Everyone from enthusiasts to Fortune 500 companies are now deploying open-source telephony software, from PBX's to voice messaging systems to VoIP gateways.
Vulnerability Analysis
This lecture will focus on the practical. We'll provide demos of the major open-source telephony systems, a brief tutorial on rapid application development, and a discussion of the effect these systems will have on the future the industry. Special attention will be paid to Bayonne and other GNU projects, and their relationship to the more ambitious GNUComm and GNU Enterprise meta-projects.
Exploitation and Demonstrations
Attendees should leave with an understanding of the general capabilities of the major existing open-source telephony projects and a working knowledge of basic application development with the GNU telephony subsytem. Rich is a regular contributor to the Bayonne project, and the coordinator of the GNUComm and Voxilla projects. He worked as a software engineer at several silicon valley telephony companies, and one Linux company, before founding Open Source Telecom Corporation (OST).
Remediation and Defensive Strategies
OST has been deploying open-source telephony systems since 1999. He has most recently spoken at the O'reilly Open Source Convention and the Intel Communications Tech Summit. He organizes the bi-annual Free Telephony Summit as well as the Telephony BOFs and GNUComm booths at LinuxWorld conventions.
Related talks
Main Stage·52 min
Gh0st
Gh0st explores telephone switchboard architectures, PBX system vulnerabilities, automated attendant exploitation, remote maintenance ports, and telephone routing tricks.
Main Stage·43 min
Stephan Huber
Discovers critical authentication bypass and remote code execution vulnerabilities in VoIP phone management interfaces enabling remote eavesdropping.
Main Stage·21 min
Eric Sesterhenn
Eric Sesterhenn presents in soviet russia smartcard hacks you: The classic spy movie hacking sequence: The spy inserts a magic smartcard provided by the agency technicians into the enemy's computer, ...the screen un...


