<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">I talk to a lot of service providers that are improving their security in the aftermath of fraud. When they're recovering from a fraud event:</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-- They're coping with a loss of tens-of-thousands of dollars. </div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-- The ops teams must answer to senior management about how they let this happen. </div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-- They're confounded to know how the attacker figured out their password scheme, or their phone config file names.</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-- Sometimes they're frustrated to find a silly mistake that was made long ago, and never fixed.</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-- Sometimes they're concerned about an insider threat. (Is somebody selling our list of MAC addresses necessary to download all the config files?)</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-- They may have legal questions, because in hosted PBX and SIP trunking, knowing exactly who's responsible for the security and who's got to pay for the fraud is unclear.</div><div class=""><br class=""></div><div class="">So for several reasons, you'll find them in poor spirits, and seldom ready to chit-chat.</div><div class=""><br class=""></div><div class="">All that said: good, informal relationships among the engineers and ops folks at different service providers can help a lot. Go to SIPNOC every year and meet your peers at other SP's. And go to your vendors' events, like the BroadSoft and Metaswitch customer meetings. Get to know some other tech folks, and keep in touch.</div><div class=""><br class=""></div><div class="">And of course, we consultants can help too. People from ECG and other consulting firms do promise to keep secrets of our clients, but we also learn the techniques and know-how used by the fraud attackers and the defenders.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div class=""><div class=""><div apple-content-edited="true" class="">
<div style="background-color: rgb(255, 255, 255); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><font size="1" color="#ff2600" class=""><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span></font></div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><font size="1" color="#ff2600" class=""><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> ---</span><span style="font-family: Consolas;" class=""> </span><font face="Consolas" class=""><a href="mailto:mark@ecg.co" class="">mailto:mark@ecg.co</a> <br class=""></font><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><font face="Consolas" class="">tel:+1-229-316-0013 <br class=""></font><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><span style="font-family: Consolas;" class=""> </span><font face="Consolas" class=""><a href="http://ecg.co/lindsey" class="">http://ecg.co/lindsey</a> </font></font></div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><font size="1" class=""><font face="Consolas" color="#ff2600" class=""><br class=""></font></font></div></div><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Apr 24, 2015, at 13:06 , Rob Dawson <<a href="mailto:rdawson@force3.com" class="">rdawson@force3.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; font-family: Cambria; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: rgb(31, 73, 125);" class="">I wasn’t necessarily thinking of a commercial solution, something more ad hoc, but they do have some pretty innovative and cool solutions.<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: rgb(31, 73, 125);" class=""> </span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: rgb(31, 73, 125);" class="">Rob<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: rgb(31, 73, 125);" class=""> </span></div><div class=""><div style="border-style: solid none none; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding: 3pt 0in 0in;" class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class=""><span style="font-size: 10pt; font-family: Tahoma, sans-serif;" class="">From:</span></b><span style="font-size: 10pt; font-family: Tahoma, sans-serif;" class=""><span class="Apple-converted-space"> </span>Alex Hardie [<a href="mailto:ahardie@bellsouth.net" style="color: purple; text-decoration: underline;" class="">mailto:ahardie@bellsouth.net</a>]<span class="Apple-converted-space"> </span><br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Friday, April 24, 2015 11:55 AM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span>Rob Dawson<br class=""><b class="">Cc:</b><span class="Apple-converted-space"> </span><a href="mailto:voiceops@voiceops.org" style="color: purple; text-decoration: underline;" class="">voiceops@voiceops.org</a><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: [VoiceOps] (no subject)<o:p class=""></o:p></span></div></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Have you looked at PinDrop? They specialize in toll fraud for both enterprises and carriers.<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Alex Hardie<br class=""><br class="">alex hardie |<span class="Apple-converted-space"> </span><a href="mailto:ahardie@bellsouth.net" style="color: purple; text-decoration: underline;" class="">ahardie@bellsouth.net</a><span class="Apple-converted-space"> </span>| +1 404 229 7635<o:p class=""></o:p></div></div><div class=""><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 11pt; font-family: Calibri, sans-serif;"><br class="">On Apr 24, 2015, at 11:51 AM, Rob Dawson <<a href="mailto:rdawson@force3.com" style="color: purple; text-decoration: underline;" class="">rdawson@force3.com</a>> wrote:<o:p class=""></o:p></p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Anyone aware of a voice fraud mailing list or listing service? Something of a repository of new attack vectors and remediations or something . . . just thinking it would be cool to see what new attacks people are running into.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">If not, any thoughts on something like this?<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Rob<o:p class=""></o:p></div></div></blockquote><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 12pt; font-family: 'Times New Roman', serif;" class="">_______________________________________________<br class="">VoiceOps mailing list<br class=""><a href="mailto:VoiceOps@voiceops.org" style="color: purple; text-decoration: underline;" class="">VoiceOps@voiceops.org</a><br class=""><a href="https://puck.nether.net/mailman/listinfo/voiceops" style="color: purple; text-decoration: underline;" class="">https://puck.nether.net/mailman/listinfo/voiceops</a><o:p class=""></o:p></span></div></div></blockquote></div><span style="font-family: Cambria; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">_______________________________________________</span><br style="font-family: Cambria; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Cambria; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">VoiceOps mailing list</span><br style="font-family: Cambria; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="mailto:VoiceOps@voiceops.org" style="color: purple; text-decoration: underline; font-family: Cambria; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">VoiceOps@voiceops.org</a><br style="font-family: Cambria; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="https://puck.nether.net/mailman/listinfo/voiceops" style="color: purple; text-decoration: underline; font-family: Cambria; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">https://puck.nether.net/mailman/listinfo/voiceops</a></div></blockquote></div><br class=""></div></div></div></body></html>