Frederico Madeira
2007-May-23 13:32 UTC
[asterisk-users] Using gizmo as softphone for Linux
Skipped content of type multipart/alternative-------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Esta =?ISO-8859-1?Q?=E9?= uma parte de mensagem assinada digitalmente Url : http://lists.digium.com/pipermail/asterisk-users/attachments/20070523/441a4928/attachment.pgp
Just because you are paranoid doesn't mean they aren't out to get you! Frederico Madeira wrote:> Hi guys, > > During a time, i'm looking for a softphone that work fine in linux, > present good features, good audio quality and good interface. > Recently i found gizmo and i'm testing it with my asterisk box. For my > purpouse he fit perfectly. > > I'm worried about security, because i need to inform my asterisk > username and password on gizmo interface, and i think that gizmo can > store this information on a database, gizmo can recorder my > conversation, can store my DTMF digits when i'm accessing my bank > account using a IVR, etc... > > How can i minimize this issues ? It's possible to use gizmo stand > alone of gizmo servers and only registered on my asterisk server ? > > Thanks. > > Fred > ------------------------------------------------------------------------ > > _______________________________________________ > --Bandwidth and Colocation provided by Easynews.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >
On Wed, May 23, 2007 at 05:32:11PM -0300, Frederico Madeira wrote:> Hi guys, > > During a time, i'm looking for a softphone that work fine in linux, > present good features, good audio quality and good interface. > Recently i found gizmo and i'm testing it with my asterisk box. For my > purpouse he fit perfectly. > > I'm worried about security,So use a free software phone, and check the code yourself. Some clients for you to try: twinkle ekiga kiax -- Tzafrir Cohen icq#16849755 jabber:tzafrir@jabber.org +972-50-7952406 mailto:tzafrir.cohen@xorcom.com http://www.xorcom.com iax:guest@local.xorcom.com/tzafrir
Frederico, Gizmo Project is a US company. I hate to tell you, but under US law, they HAVE to be able to record not only detailed CDRs about your call, but also your DTMF codes and full conversations. Now, this would only be in the case of a warrant issued by the US Government to retrieve this information, but the possibility IS there. We just had to set up a CALEA box for our datacenter to meet the May deadline, and I got to learn about all the nifty things that CALEA requires, how it's processed, and what the current batch of hardware CAN and CAN'T do. For instance, things like ZRTP, SRTP, and audio-only DTMF are still (and likely to remain) pretty much impossible to decode for all calls. But of course, once you hit the PSTN (which is, after all, just a bunch of wires, fiber, and switches), it becomes relatively cake to record things. At that point, though, you're beyond the reach of Gizmo and now within the reach of little Timmy and his lineman's handset (if you REALLY want to get paranoid). Face it. If you're worried about the possible security of using a particular VoIP service for things like dialing bank PINs, you're probably worrying waaay too much. Gizmo Project, while it does have somewhat of a silly name (although no sillier than most in the business), is a reputable company with well-known owners, and would have a very difficult time sifting through all of its traffic to search for possible bank PINs and other juicy info. N. Frederico Madeira wrote:> Hi guys, > > During a time, i'm looking for a softphone that work fine in linux, > present good features, good audio quality and good interface. > Recently i found gizmo and i'm testing it with my asterisk box. For my > purpouse he fit perfectly. > > I'm worried about security, because i need to inform my asterisk > username and password on gizmo interface, and i think that gizmo can > store this information on a database, gizmo can recorder my > conversation, can store my DTMF digits when i'm accessing my bank > account using a IVR, etc... > > How can i minimize this issues ? It's possible to use gizmo stand > alone of gizmo servers and only registered on my asterisk server ? > > Thanks. > > Fred > ------------------------------------------------------------------------ > > _______________________________________________ > --Bandwidth and Colocation provided by Easynews.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >