[Linphone-users] Login

[Keani Shayde]

Hi, I was wondering if I could get help with login into linphone.
I had been logged in and using linphone for the past 2months without a
worry and then 2mornings ago It was reading connection failed and when I
logged out and logged back in it was saying account doesn't exist or
password doesn't match but I've logged into my 0800 providers site for acc
maintenance and my account info hasn't changed, not has my password and I'm
still able to send and receive calls with my 0800 diverted to my cellphone
number, so it's not my 0800 number account or details that are incorrect
Could you please help
___
Linphone-users mailing list
Linphone-users@nongnu.org
https://lists.nongnu.org/mailman/listinfo/linphone-users

Re: [Linphone-users] Login details not transmitted securely

[Guillaume]

What kind of connection to the server were you using? Did you enable TLS?
If using simple TCP/UDP connection, this is expected. Using TLS, you shouldn’t 
be able to to that.

Best regards,
Guillaume Bienkowski
guillaume.bienkow...@belledonne-communications.com



> Le 18 mars 2016 à 23:31, Shadow Dragon  a écrit :
> 
> By running a MITM attack I was able to intercept login details as they
> were not properly protected.
> *note: password hash has been removed*
> 
> [192.168.0.100 > 91.121.209.194:5060] [HTTP Digest AUTH] http://
> Digest: username="shadow_dragon", realm="sip.linphone.org",
> nonce="3liI2gCOEVNdAACwI+TVyvwA", uri="sip:sip.linphone.org",
> response="*redacted*", algorithm=MD5,
> cnonce="24f9e2be-e1da-4d2f-b97f-b08d6df80e9e", opaque="+GNywA==",
> qop=auth, nc=0001
> 
> ___
> Linphone-users mailing list
> Linphone-users@nongnu.org
> https://lists.nongnu.org/mailman/listinfo/linphone-users


___
Linphone-users mailing list
Linphone-users@nongnu.org
https://lists.nongnu.org/mailman/listinfo/linphone-users

[Linphone-users] Login details not transmitted securely

[Shadow Dragon]

By running a MITM attack I was able to intercept login details as they
were not properly protected.
*note: password hash has been removed*

[192.168.0.100 > 91.121.209.194:5060] [HTTP Digest AUTH] http://
Digest: username="shadow_dragon", realm="sip.linphone.org",
nonce="3liI2gCOEVNdAACwI+TVyvwA", uri="sip:sip.linphone.org",
response="*redacted*", algorithm=MD5,
cnonce="24f9e2be-e1da-4d2f-b97f-b08d6df80e9e", opaque="+GNywA==",
qop=auth, nc=0001

___
Linphone-users mailing list
Linphone-users@nongnu.org
https://lists.nongnu.org/mailman/listinfo/linphone-users