Well....they terminate all their Home Phone to a bunch of BTX4K....I believe
the BTX4K is capable of encryption, but I've been told by a former Rogers
employee that he is pretty sure they aren't using it (it doesn't scale well)
I just found this on the BTX4K. It says it signals TGCP (which is the
PacketCable extensions to MGCP)
http://www.nuera.com/products/ORCA_BTX-4K.cfm
----- Original Message -----
From: "Michael Richardson" <[EMAIL PROTECTED]>
To: "Bill Sandiford" <[EMAIL PROTECTED]>
Cc: <[email protected]>
Sent: Thursday, December 06, 2007 11:17 PM
Subject: Re: [on-asterisk] Scary Call from Bell Muscle Men...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
"Bill" == Bill Sandiford <[EMAIL PROTECTED]> writes:
Bill> Basically the Rogers Home Phone adapter is a normal DOCSIS
Bill> cable modem with a NCS VoIP ATA built in. For those of you
Bill> that don't know, NCS is a bunch of extensions to MGCP designed
Bill> for and by the cable industry (kind of like H.248). So what
Bill> you basically have is a modem/ATA combo not much different
Bill> than the DSL modem/ATA combos that are available (think Zoom
Bill> x5v, Zhone 6238 or Thomson 780wl)
So Rogers actually deployed NCS then?
Yes, it's MGCP, which is *TOTALLY* insecure unless you encrypt.
Fortunately NCS does encrypt using IPsec, keyed using a kerberos based
method.
(NCS infrastructure is *TESTED* using a variation of Openswan)
Bill> As far as the "anyone can listen to your call comment", once
Bill> again possible but highly unlikely. In order to do this
Bill> someone would have to meet all of the following requirements.
...
or... crack the system which is used by the COPS to do eavesdropping,
which actually is not very secure....
- --
] Bear: "Me, I'm just the shape of a bear." |
firewalls [
] Michael Richardson, Xelerance Corporation, Ottawa, ON |net
architect[
] [EMAIL PROTECTED] http://www.sandelman.ottawa.on.ca/mcr/ |device
driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security
guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Finger me for keys
iQEVAwUBR1jJSYCLcPvd0N1lAQKr4AgAsKZ8QTtQxxLFV2v40Jrk/wBBLwi6yAMG
vAb6zcOVUVdGUb/hSR/QXzEezFklE2IOCL/xq4OZ+BQGR2K5AdLJ7JWfslij+VUx
Fy3G8bES61nJ8FnI5SCh52sp2wyVaqkMC9RLGqajcvQ1ELfyUNTh8GjeNQDPpdxF
nUZYsZNsqpPaZsCY2MBiVqebsZEiS8CsrpX/tCOPWX04jFtzHfRzpUEc3llt/BCt
ewaTLCQ8iiADLiYLLnwCit/aQrxw5Mw04wiSkIK0CDe4GNKLY26cKwYR1DePmAMg
68K+IgoZHNgdrTxo8SLyBAGjUCXqCXAyINcxx9+BgFZdxtY8GkVeEw==
=TeR4
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
