Comments on: Call Jacking: Phreaking the BT Home Hub http://www.gnucitizen.org/blog/call-jacking/ Cutting-edge Think tank | Ethical Hacker Outfit Sun, 20 Jul 2008 22:24:20 +0000 http://wordpress.org/?v=2.5.1 By: Holes in Embedded Devices: Authentication bypass (pt 2) | GNUCITIZEN http://www.gnucitizen.org/blog/call-jacking/#comment-114824 Holes in Embedded Devices: Authentication bypass (pt 2) | GNUCITIZEN Fri, 15 Feb 2008 17:18:50 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-114824 [...] http://www.gnucitizen.org/blog/call-jacking [...] [...] http://www.gnucitizen.org/blog/call-jacking [...]

]]> By: Call Jacking | VoipBloggen http://www.gnucitizen.org/blog/call-jacking/#comment-114790 Call Jacking | VoipBloggen Fri, 15 Feb 2008 06:03:18 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-114790 [...] Gnucitizen er jeg faldet over dette spændende indlæg om Call Jacking, hvilket svarer til Hi Jacking, altså en erobring af folks [...] [...] Gnucitizen er jeg faldet over dette spændende indlæg om Call Jacking, hvilket svarer til Hi Jacking, altså en erobring af folks [...]

]]> By: Total surveillance made easy with VoIP phones » Inking’s Security Blog http://www.gnucitizen.org/blog/call-jacking/#comment-113396 Total surveillance made easy with VoIP phones » Inking’s Security Blog Tue, 12 Feb 2008 05:29:38 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-113396 [...] the article about call jacking with the BT Home Hub? Here is something comparable but pretty new. Since Ronald and pdp had [...] [...] the article about call jacking with the BT Home Hub? Here is something comparable but pretty new. Since Ronald and pdp had [...]

]]> By: Total surveillance made easy with VoIP phones | GNUCITIZEN http://www.gnucitizen.org/blog/call-jacking/#comment-113213 Total surveillance made easy with VoIP phones | GNUCITIZEN Mon, 11 Feb 2008 22:03:49 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-113213 [...] the article about call jacking with the BT Home Hub? Here is something comparable but pretty new. Since Ronald and pdp had [...] [...] the article about call jacking with the BT Home Hub? Here is something comparable but pretty new. Since Ronald and pdp had [...]

]]> By: Voice over IP Calljacking « security matters http://www.gnucitizen.org/blog/call-jacking/#comment-113057 Voice over IP Calljacking « security matters Mon, 11 Feb 2008 11:41:30 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-113057 [...] nicht bietet gnucitizen ein Beispiel wie der VOIP-Router von British Telecom (BT) dazu genutzt werden kann, ungewollte [...] [...] nicht bietet gnucitizen ein Beispiel wie der VOIP-Router von British Telecom (BT) dazu genutzt werden kann, ungewollte [...]

]]> By: Adrian Pastor http://www.gnucitizen.org/blog/call-jacking/#comment-103465 Adrian Pastor Fri, 25 Jan 2008 12:34:44 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-103465 It looks like other home hub users who are also running firmware 6.2.6.B have confirmed our VoIP call jacking hack: http://www.digitalspy.co.uk/forums/showthread.php?t=735655&highlight=6.2.6.B It looks like other home hub users who are also running firmware 6.2.6.B have confirmed our VoIP call jacking hack: http://www.digitalspy.co.uk/fo.....ht=6.2.6.B

]]> By: Adrian Pastor http://www.gnucitizen.org/blog/call-jacking/#comment-103210 Adrian Pastor Fri, 25 Jan 2008 01:20:26 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-103210 @David - I guess there is something contagious about my laugh? hehehe @hackathology - you're welcome dude! @Avee - actually it'd be quite simple to setup a tool that allows you to dial phone numbers from your laptop with a simple HTML. @David - I guess there is something contagious about my laugh? hehehe

@hackathology - you’re welcome dude!

@Avee - actually it’d be quite simple to setup a tool that allows you to dial phone numbers from your laptop with a simple HTML.

]]> By: Avee http://www.gnucitizen.org/blog/call-jacking/#comment-102613 Avee Wed, 23 Jan 2008 10:54:26 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102613 This is pretty useful for autodialing stuff from my laptop. Thanks! This is pretty useful for autodialing stuff from my laptop. Thanks!

]]> By: hackathology http://www.gnucitizen.org/blog/call-jacking/#comment-102532 hackathology Wed, 23 Jan 2008 03:26:21 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102532 thanks Adrian. thanks Adrian.

]]> By: David Kierznowski http://www.gnucitizen.org/blog/call-jacking/#comment-102445 David Kierznowski Tue, 22 Jan 2008 20:10:26 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102445 Adrian's laugh is always comical :) Adrian’s laugh is always comical :)

]]> By: » Voip flaw in BT router or just an unpatched vulnerability? | IT News Digest | TechRepublic.com http://www.gnucitizen.org/blog/call-jacking/#comment-102407 » Voip flaw in BT router or just an unpatched vulnerability? | IT News Digest | TechRepublic.com Tue, 22 Jan 2008 17:31:15 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102407 [...] video of the voip exploit is available on YouTube and also details on the flaw as mentioned on the blog of the GNUCitizen Blog are: In summary, if the victim visits our evil proof-of-concept webpage, his/her browser sends a [...] [...] video of the voip exploit is available on YouTube and also details on the flaw as mentioned on the blog of the GNUCitizen Blog are: In summary, if the victim visits our evil proof-of-concept webpage, his/her browser sends a [...]

]]> By: goundoulf http://www.gnucitizen.org/blog/call-jacking/#comment-102362 goundoulf Tue, 22 Jan 2008 14:03:09 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102362 The only way to prevent this with ISP gateways is... projects like http://www.neufbox4.org which aims at creating an alternative and entirely open firmware for the gateway ISPs usually break the GPL by using free software and not redistributing, and their gateways rely on security by obscurity. The customer is then dependent on the firmware upgrade from the ISP following the discovery of a vulnerability, and some times it can take ages before it is corrected. When the community is in charge of an alternative firmware, vulnerabilities are spotted earlier and corrected faster. The only way to prevent this with ISP gateways is…

projects like http://www.neufbox4.org which aims at creating an alternative and entirely open firmware for the gateway

ISPs usually break the GPL by using free software and not redistributing, and their gateways rely on security by obscurity.

The customer is then dependent on the firmware upgrade from the ISP following the discovery of a vulnerability, and some times it can take ages before it is corrected.

When the community is in charge of an alternative firmware, vulnerabilities are spotted earlier and corrected faster.

]]> By: Adrian Pastor http://www.gnucitizen.org/blog/call-jacking/#comment-102355 Adrian Pastor Tue, 22 Jan 2008 13:35:23 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102355 @hackathology - 00390669893461 is an international phone number located in the country whose code is 39 (vatican city in this case): http://www.countrycallingcodes.com/Reverse-Lookup.php?calling-code=39 @Tim - they prob. fixed it. We tested it on 6.2.6.B, which was the most udpated firmware we could get at time of testing without being part of FON. I believe that signing up for FON makes your Home Hub upgrade to a newer firmware? Correct me if I'm wrong. as pdp pointed out, firmware version 6.2.6.E can take several weeks to upgrade and it appears that many users are having problems receiving the new firmware. @hackathology - 00390669893461 is an international phone number located in the country whose code is 39 (vatican city in this case): http://www.countrycallingcodes.....ng-code=39

@Tim - they prob. fixed it. We tested it on 6.2.6.B, which was the most udpated firmware we could get at time of testing without being part of FON. I believe that signing up for FON makes your Home Hub upgrade to a newer firmware? Correct me if I’m wrong.

as pdp pointed out, firmware version 6.2.6.E can take several weeks to upgrade and it appears that many users are having problems receiving the new firmware.

]]> By: pdp http://www.gnucitizen.org/blog/call-jacking/#comment-102342 pdp Tue, 22 Jan 2008 12:42:26 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102342 <blockquote>The rollout of the BT Home Hub firmware version 6.2.6.E started on 12 December 2007. It can take several weeks before all BT Home Hubs are upgraded to a new version of the firmware, so please be patient. <a href="http://bt.custhelp.com/cgi-bin/bt.cfg/php/enduser/cci/bt_adp.php?cat_lvl1=346&cat_lvl2=401&cat_lvl3=407&cat_lvl4=751&p_cv=4.751&p_cats=346,401,407,751&p_faqid=9381" rel="nofollow">BT Support & Advice</a></blockquote>

The rollout of the BT Home Hub firmware version 6.2.6.E started on 12 December 2007. It can take several weeks before all BT Home Hubs are upgraded to a new version of the firmware, so please be patient. BT Support & Advice

]]> By: Ben Tasker http://www.gnucitizen.org/blog/call-jacking/#comment-102340 Ben Tasker Tue, 22 Jan 2008 12:33:23 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102340 Either BT have now fixed it, or not all BT Home Hubs are vulnerable. Mine simply asks for the username and password, and then asks again when I hit cancel. The phone never rings afterwards, I do have BT BroadBand Talk and a BT Home Hub running Version 6.2.6.E Either BT have now fixed it, or not all BT Home Hubs are vulnerable. Mine simply asks for the username and password, and then asks again when I hit cancel.

The phone never rings afterwards, I do have BT BroadBand Talk and a BT Home Hub running Version 6.2.6.E

]]> By: Tim http://www.gnucitizen.org/blog/call-jacking/#comment-102335 Tim Tue, 22 Jan 2008 12:16:42 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102335 BT have claimed this attack doesn't work with the firmware they have rolled out at the moment. BT have claimed this attack doesn’t work with the firmware they have rolled out at the moment.

]]> By: phil_mcracken http://www.gnucitizen.org/blog/call-jacking/#comment-102309 phil_mcracken Tue, 22 Jan 2008 09:34:06 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102309 If I blackholed the DNS for api.home on my local machine (and others on the network) in the HOSTS file, surely that would render this attack useless? If I blackholed the DNS for api.home on my local machine (and others on the network) in the HOSTS file, surely that would render this attack useless?

]]> By: hackathology http://www.gnucitizen.org/blog/call-jacking/#comment-102308 hackathology Tue, 22 Jan 2008 09:26:58 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102308 interesting post. But is 00390669893461 the voip phone number or the LAN line? How did you derive into that number? interesting post. But is 00390669893461 the voip phone number or the LAN line? How did you derive into that number?

]]> By: CBM Security Blog » Blog Archive » More problems for BT Home Hub - This time VOIP http://www.gnucitizen.org/blog/call-jacking/#comment-102293 CBM Security Blog » Blog Archive » More problems for BT Home Hub - This time VOIP Tue, 22 Jan 2008 08:14:07 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102293 [...] More on this is here http://www.gnucitizen.org/blog/call-jacking [...] [...] More on this is here http://www.gnucitizen.org/blog/call-jacking [...]

]]> By: Online fraud - please help/advise!!! - Page 4 - The Liverpool Way http://www.gnucitizen.org/blog/call-jacking/#comment-102136 Online fraud - please help/advise!!! - Page 4 - The Liverpool Way Mon, 21 Jan 2008 17:02:29 +0000 http://www.gnucitizen.org/blog/call-jacking#comment-102136 [...] Online fraud - please help/advise!!! This is getting worse... Call Jacking: Phreaking the BT Home Hub | GNUCITIZEN [...] [...] Online fraud - please help/advise!!! This is getting worse… Call Jacking: Phreaking the BT Home Hub | GNUCITIZEN [...]

]]>