On Fri, Jun 24, 2005 at 11:57:17AM -0400, Julio Arruda wrote:
2- Out-of-band is as safe/unsafe as having the conversation recorded,
including pin, by the hacker, if no encrypted voice path is being used.
I haven't given much thought to this earlier, so I hope the following is
not total crap:
It depends really. There's about 3 different ways to send DTMF with SIP. One
is inband, as audio. Another is rfc2833, which is not as audio - but still
goes via the RTP stream as separate packets. The last one is info, which
sends it over the control stream as SIP packets.
- Joshua Colp.
On
On Thursday 23 June 2005 19:57, Brian West wrote:
With inband its at least not sent in clear text.
It's trivial to pull DTMF out of an inband stream too. Perhaps not AS trivial
but just the same, you should be using SRTP if you're paranoid about this
kind of thing.
-A.
On Thursday 23 June 2005 15:19, [EMAIL PROTECTED] wrote:
Why don't Asterisk support inband DTMF with G729? Is there a way to do
that!?
If you figure out how to do it, I'm sure you will have a very captive and
attentive audience to explain how you're sending continuous tones over a
lossy
On Thursday 23 June 2005 15:19, [EMAIL PROTECTED] wrote:
Why don't Asterisk support inband DTMF with G729? Is there a way to do
that!?
If you figure out how to do it, I'm sure you will have a very captive and
attentive audience to explain how you're sending continuous tones over a
lossy
On Thursday 23 June 2005 19:57, Brian West wrote:
With inband its at least not sent in clear text.
It's trivial to pull DTMF out of an inband stream too. Perhaps not AS
trivial
but just the same, you should be using SRTP if you're paranoid about this
kind of thing.
We are on a real
On Friday 24 June 2005 10:58, [EMAIL PROTECTED] wrote:
But there are some products that supports DTMF inband on G729. Ok, it will
not work in most cases(like everyone told) but why Asterisk dont support
it? Is this hardcoded, or is possible to try it out?
Asterisk can do it too, it's just not
On Friday 24 June 2005 11:02, [EMAIL PROTECTED] wrote:
We are on a real world... Every cyber cafe has its own little
hacker/cracker that is sniffing out... A simple ethereal capture could
give me a bank pin number... It is REALLY trivial!
And this is different exactly HOW with inband DTMF??
[EMAIL PROTECTED] wrote:
On Thursday 23 June 2005 19:57, Brian West wrote:
With inband its at least not sent in clear text.
It's trivial to pull DTMF out of an inband stream too. Perhaps not AS
trivial
but just the same, you should be using SRTP if you're paranoid about this
kind of thing.
Andrew Kohlsmith wrote:
On Friday 24 June 2005 10:58, [EMAIL PROTECTED] wrote:
But there are some products that supports DTMF inband on G729. Ok, it will
not work in most cases(like everyone told) but why Asterisk dont support
it? Is this hardcoded, or is possible to try it out?
Asterisk
On Friday 24 June 2005 11:59, Julio Arruda wrote:
I think that IAX, as one example, won't allow this ? Have a faint memory
of some error message when trying it (maybe was ILBC+iax ?)
IAX2 sends all DTMF tones out of band. It's designed that way.
-A.
Julio Arruda wrote:
I think that IAX, as one example, won't allow this ? Have a faint memory
of some error message when trying it (maybe was ILBC+iax ?)
IAX does not support inband DTMF for any codec.
___
Asterisk-Users mailing list
On Fri, Jun 24, 2005 at 11:59:51AM -0400, Julio Arruda wrote:
Andrew Kohlsmith wrote:
On Friday 24 June 2005 10:58, [EMAIL PROTECTED] wrote:
But there are some products that supports DTMF inband on G729. Ok, it will
not work in most cases(like everyone told) but why Asterisk dont support
On Friday 24 June 2005 11:02, [EMAIL PROTECTED] wrote:
We are on a real world... Every cyber cafe has its own little
hacker/cracker that is sniffing out... A simple ethereal capture could
give me a bank pin number... It is REALLY trivial!
And this is different exactly HOW with inband DTMF??
On Friday 24 June 2005 11:02, [EMAIL PROTECTED] wrote:
We are on a real world... Every cyber cafe has its own little
hacker/cracker that is sniffing out... A simple ethereal capture could
give me a bank pin number... It is REALLY trivial!
And this is different exactly HOW with inband DTMF??
On Friday 24 June 2005 11:02, [EMAIL PROTECTED] wrote:
We are on a real world... Every cyber cafe has its own little
hacker/cracker that is sniffing out... A simple ethereal capture could
give me a bank pin number... It is REALLY trivial!
And this is different exactly HOW with inband DTMF??
On Fri, 24 Jun 2005 13:10:13 -0400 (EDT)
[EMAIL PROTECTED] wrote:
On Friday 24 June 2005 11:02, [EMAIL PROTECTED] wrote:
We are on a real world... Every cyber cafe has its own
little
hacker/cracker that is sniffing out... A simple ethereal
capture could
give me a bank pin number... It is
On Friday 24 June 2005 13:10, [EMAIL PROTECTED] wrote:
Ok, point me on HOW may I get DTMF inband with ethereal.
You capture the data stream, then pull the audio frames out and reassemble to
a nice slinear audio file (say wav?) -- put that through code cobbled
together with asterisk's dsp.c or
Hello, I'm not sure about Asterisk and in band DTMF without careful
reading, but i do know that most ATA's and soft phones all have in band
capabilities if set. G729 may not pass in band DTMF correctly all the
time,in fact it's very poor and this is the reason for out of band. I
think from
2- Out-of-band is as safe/unsafe as having the conversation recorded,
including pin, by the hacker, if no encrypted voice path is being used.
as others mentioned, DTMF tones would be very obvious in a trace
(maybe someone may want to post an example).
Watch out:
Thanks for your comments Andrew and others.
You're right about the false sense of security, I will discuss it with
my team.
I'll check out SRTP support and implementations to see if it is
reasonsable right now.
Do you know what kind of DTMF/CODEC is used by Vonage by default, for
example? I
[EMAIL PROTECTED] wrote:
2- Out-of-band is as safe/unsafe as having the conversation recorded,
including pin, by the hacker, if no encrypted voice path is being used.
as others mentioned, DTMF tones would be very obvious in a trace
(maybe someone may want to post an example).
Watch out:
Hi all.
Why don't Asterisk support inband DTMF with G729? Is there a way to do
that!?
Are you using RFC2833? Doesn't it a security hole?
Thanks.
Denis.
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
[EMAIL PROTECTED]
Sent: Thursday, June 23, 2005 2:19 PM
To: asterisk-users@lists.digium.com
Subject: [Asterisk-Users] INBAND DTMF G729 ASTERISK
Hi all.
Why don't Asterisk support inband DTMF with G729
On Thu, Jun 23, 2005 at 03:19:06PM -0400, [EMAIL PROTECTED] wrote:
Why don't Asterisk support inband DTMF with G729? Is there a way to do
that!?
I think the answer to that is quite obvious; G.729 is a lossy voice oriented
compression technique. Any inband DTMF data will be essentially
Are you using RFC2833? Doesn't it a security hole?
Sorry, don't know if I quite get your point here. Care to expound
on what
you're talking about?
Just don't call your bank via voip or anything that needs a pin
because it can CLEARLY be detected without much problem.
/b
On Thu, 2005-06-23 at 17:42 -0500, Brian West wrote:
Are you using RFC2833? Doesn't it a security hole?
Sorry, don't know if I quite get your point here. Care to expound
on what
you're talking about?
Just don't call your bank via voip or anything that needs a pin
because it
With inband its at least not sent in clear text.
/b
---
Anakin: “You’re either with me, or you’re my enemy.”
Obi-Wan: “Only a Sith could be an absolutist.”
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
28 matches
Mail list logo
