Skip to content

It Is Now Safe to Compile Your Phone System

Rich Bodo

Rich Bodo - It is Now Safe to Compile your Phone System The telephony industry was late to adopt open-source software and commodity protocols.

Summary

Architecture and Background

Rich Bodo - It is Now Safe to Compile your Phone System The telephony industry was late to adopt open-source software and commodity protocols. The open-source development community is rapidly correcting that problem. Everyone from enthusiasts to Fortune 500 companies are now deploying open-source telephony software, from PBX's to voice messaging systems to VoIP gateways.

Vulnerability Analysis

This lecture will focus on the practical. We'll provide demos of the major open-source telephony systems, a brief tutorial on rapid application development, and a discussion of the effect these systems will have on the future the industry. Special attention will be paid to Bayonne and other GNU projects, and their relationship to the more ambitious GNUComm and GNU Enterprise meta-projects.

Exploitation and Demonstrations

Attendees should leave with an understanding of the general capabilities of the major existing open-source telephony projects and a working knowledge of basic application development with the GNU telephony subsytem. Rich is a regular contributor to the Bayonne project, and the coordinator of the GNUComm and Voxilla projects. He worked as a software engineer at several silicon valley telephony companies, and one Linux company, before founding Open Source Telecom Corporation (OST).

Remediation and Defensive Strategies

OST has been deploying open-source telephony systems since 1999. He has most recently spoken at the O'reilly Open Source Convention and the Intel Communications Tech Summit. He organizes the bi-annual Free Telephony Summit as well as the Telephony BOFs and GNUComm booths at LinuxWorld conventions.

Related talks

Main Stage·52 min

  • DEF CON
  • Red Team
  • Date: Jul 1999
  • Location: Las Vegas

Gh0st

Gh0st explores telephone switchboard architectures, PBX system vulnerabilities, automated attendant exploitation, remote maintenance ports, and telephone routing tricks.

phreakingpbx-securitytelephony+1

Main Stage·21 min

  • DEF CON
  • Hardware
  • Date: Aug 2018
  • Location: Las Vegas

Eric Sesterhenn

Eric Sesterhenn presents in soviet russia smartcard hacks you: The classic spy movie hacking sequence: The spy inserts a magic smartcard provided by the agency technicians into the enemy's computer, ...the screen un...

smartcardhardware-securityreverse-engineering+1