Fake MicroSoft calls Post: 303011432

Sponsored Content

Special Forums Cybersecurity Fake MicroSoft calls Post 303011432 by Neo on Thursday 18th of January 2018 08:17:32 AM

01-18-2018

Administrator

I recall VoIP vulnerabilities over the years and for many years.

On another note, it is always important to keep in mind that (IT) RISK is the intersection of VULNERABILITY, THREAT & CRITICALITY.

So, even if there is a VULNERABILITY, if there is no real THREAT or CRITICALITY, then RISK is LOW.

For example, for someone who uses VoIP and is not a high profile person or spy or criminal etc who has THREATS and if a VULNERABILITY is exploited, it does not do critical harm (in the case of VoIP threats for most people who use VoIP daily), then the RISK is low.

I've been aware of possible VoIP exploits for many years, but it does not stop me from using the myriad technologies that use VoIP. This especially applies to VoIP technologies which are encrypted. LINE, What's App and I believe Skype are all encrypted and so exploiting these VoIP vulnerabilities are non trivial, as I recall, and so most users who use encrypted VoIP are not at high RISK.

There is also the RISK MITIGATION model, which combines TECHNICAL (LOGICAL) CONTROLS, PHYSICAL CONTROLS AND ADMINISTRATIVE CONTROLS, should be considered as well

Encrypting a VoIP channel is a TECHNICAL CONTROL and having a policy whereas HIGHLY SENSITIVE USERS do not use these apps unless approved is an ADMINISTRATIVE CONTROL.

It is important to keep in mind that RISK MANAGEMENT and RISK MITIGATION is a multidimensional and multifaceted approach, so VULNERABILITIES must be viewed in context to the THREAT and CRITICALITY; and RISK MITIGATION must be viewed in terms of RISK and the "best" combination of controls (ADMIN, TECH, PHYSICAL) based on RISK (and this implies budget as well).

Cheers.

This User Gave Thanks to Neo For This Post:

Neo

View Public Profile for Neo

Visit Neo's homepage!

Find all posts by Neo

2 More Discussions You Might Find Interesting

1. IP Networking

Identification of data calls & voice calls

Is there any facility to filter/identify the data calls and voice calls coming throug modem? OR Can we get the data or voice calls information through a script(preferably C Kermit)?

2. Windows & DOS: Issues & Discussions

Microsoft Powerpoint 2003 stops working after 12 April 2011 Microsoft Updates

For the benefit of the community this is a widespread worldwide problem affecting multiple versions of Microsoft Windows. Powerpoint erroneously reports Powerpoint presentation damaged and then often hangs. Until Microsoft sort this out, try removing Powerpoint security update KB 2464588...

LEARN ABOUT DEBIAN

idjc

IDJC(1) 							Internet DJ Console							   IDJC(1)

NAME

       idjc - be a dj on the internet

SYNOPSIS

       idjc

       idjc run --help

       idjc generateprofile --help

DESCRIPTION

       idjc is a powerful yet easy to use source-client for individuals interested in streaming live radio shows over the Internet using Shoutcast
       or Icecast servers or for making static recordings.

       Features include two main media players with a crossfader, a jingles player, microphone signal processing  (compressor,	noise  gate),  IRC
       announcements,  automatic  stream  start/stop  and  reconnection, simultaneous mp3 and Ogg streaming, up to 12 mono or 6 stereo audio input
       channels, a DSP interface, a VoIP integration feature, MIDI input device support, audio level meters.

       It uses GTK+ for the user interface and JACK Audio Connection Kit for the audio back-end permitting the inclusion of third-party audio com-
       ponents into the mix.

ENVIRONMENT

       If  the ~/.jackdrc file is not present depending on how recent a version of jackd you have JACK will either not start automatically or will
       start but configure itself with a sample rate of 48000 which is suboptimal for streaming CD audio. It is recommended to create such a  file
       by this method within a console.

       $ echo "/usr/bin/jackd -d alsa -r 44100 -p 2048" > ~/.jackdrc

       If you prefer to start the JACK sound server manually you can do so like this.

       $ jackd -d alsa -r 44100 -p 2048

       Refer to jackd(1) for further details.

       idjc has native language support built in and takes account of the LANG and LANGUAGE environment variables.

SEE ALSO

       http://idjc.sourceforge.net http://www.sourceforge.net/projects/idjc

       jackd(1), idjcctrl(1)

idjc-0.8.7							    2011-10-08								   IDJC(1)