Todd, my comment is not intended to point out at any vulnerability in asterisk (independent if such exists or not). Rather it is intended to point out the particularity of the request. To be fair, if someone asked to know a list of consulates who used Nortel PBXs, or Toshibas PBXs, the request would raise one of my eyebrows just the same, in lieu of the peculiarity of it alone. I could be wrong, but why not factor in social engineering as dutifully as setting up a firewall. Even if such information is requested with everyone's best intentions, it is still the kind of info worth jotting down as it may become helpful to somebody some day. Just my 2 cents, I hope to make this list 2 cents richer.
CS -----Original Message----- From: asterisk-biz-boun...@lists.digium.com [mailto:asterisk-biz-boun...@lists.digium.com] On Behalf Of John Todd Sent: Tuesday, September 01, 2009 8:29 PM To: Commercial and Business-Oriented Asterisk Discussion Subject: Re: [asterisk-biz] Any installations in European Consulates or Embassies? Well, I think that's a bit far-fetched. Really, really far-fetched. Random fishing expeditions for vendors of PBX platforms, which are going to be on private networks, is inefficient to the point of zero returns. There are so many other layers of security that have to be penetrated before the concept of "Asterisk" is a security element that is even considered... If you've seen embassy telecommunications systems in any security-minded nation, you'd understand that vendor identity for primary platform isn't a serious consideration. JT On Sep 1, 2009, at 2:43 AM, C. Savinovich wrote: > I would be so paranoid... what if they want that information to see > what embassies can be hacked? > > CS > > -----Original Message----- > From: asterisk-biz-boun...@lists.digium.com > [mailto:asterisk-biz-boun...@lists.digium.com] On Behalf Of John Todd > Sent: Tuesday, September 01, 2009 6:53 PM > To: Commercial and Business-Oriented Asterisk Discussion > Subject: [asterisk-biz] Any installations in European Consulates or > Embassies? > > > I've got a rather unusual request to discover if any European > Consulates are running Asterisk as their PBX platform. For that > matter, are there any embassies that could step forward? This is for > a private query (by another > consulate) and replies may be privately held if requested, other than > informing the end user. Or they may be public, which would be > preferred so we can get various government agencies on the list of > reference-able sites. > > JT > --- John Todd email:jt...@digium.com Digium, Inc. | Asterisk Open Source Community Director 445 Jan Davis Drive NW - Huntsville AL 35806 - USA direct: +1-256-428-6083 http://www.digium.com/ _______________________________________________ --Bandwidth and Colocation Provided by http://www.api-digital.com-- AstriCon 2009 - October 13 - 15 Phoenix, Arizona Register Now: http://www.astricon.net asterisk-biz mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-biz _______________________________________________ --Bandwidth and Colocation Provided by http://www.api-digital.com-- AstriCon 2009 - October 13 - 15 Phoenix, Arizona Register Now: http://www.astricon.net asterisk-biz mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-biz
