<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>VoIP-Point &#187; vulnerability</title>
	<atom:link href="http://www.voip-point.net/tag/vulnerability/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.voip-point.net</link>
	<description>Voice Over IP News and Advice</description>
	<lastBuildDate>Mon, 27 Sep 2010 16:08:09 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>VoIP compression presents security risk</title>
		<link>http://www.voip-point.net/2008/06/14/voip-compression-presents-security-risk/</link>
		<comments>http://www.voip-point.net/2008/06/14/voip-compression-presents-security-risk/#comments</comments>
		<pubDate>Sat, 14 Jun 2008 00:17:55 +0000</pubDate>
		<dc:creator>voipmaster</dc:creator>
				<category><![CDATA[Networks]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[SIP]]></category>
		<category><![CDATA[eavesdropping]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[john hopkins]]></category>
		<category><![CDATA[packet analysis]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://www.voip-point.net/?p=59</guid>
		<description><![CDATA[An article in New Scientist reports that ISP&#8217;s intentions to use a compression technique to reduce the bandwidth required for VoIP calls could pose a significant eavesdropping threat to users. The issue lies in the way the &#8216;sounds&#8217; of a conversation are compressed. &#8230;the sampling rate is kept high for long complex sounds like &#8220;ow&#8221;, [...]]]></description>
			<content:encoded><![CDATA[<p>An article in New Scientist <a href="http://technology.newscientist.com/article/dn14124-compressed-web-phone-calls-are-easy-to-bug.html" target="_blank">reports</a> that ISP&#8217;s intentions to use a compression technique to reduce the bandwidth required for VoIP calls could pose a significant eavesdropping threat to users.</p>
<p>The issue lies in the way the &#8216;sounds&#8217; of a conversation are compressed.</p>
<blockquote><p>&#8230;the sampling rate is kept high for long complex sounds like &#8220;ow&#8221;, but cut down for simple consonants like &#8220;c&#8221;. This variable method saves on bandwidth, while maintaining sound quality.</p></blockquote>
<p>Simply by analysing the encrypted stream for the difference between the sizes of the packets, researchers at John Hopkins university say they can identify entire words with a high degree of accuracy.</p>
<p>The John Hopkins team hope that they have caught this threat in time but I think it will take a good deal of shouting about it for the ISPs to take notice and change their planned deployments.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.voip-point.net/2008/06/14/voip-compression-presents-security-risk/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

