Vonage’s subscriber growth has exploded over the past few years, but how many of those customers realize how vulnerable their calls are to eavesdropping by third parties?

Vonage, like many other VOIP providers, uses SIP for call signaling and several RTP codecs for the audio portion. Vonage goes to great lengths to encrypt the configuration files used on the ATA adapters, but NO encryption is used on the audio portion of a call. Anyone with access to the RTP packets and the proper codec can monitor and record Vonage calls. This video tutorial walks you through the process of intercepting and monitoring Vonage calls on your network.

Watch the Hacking Vonage Tutorial

Do it Yourself Prerequisites:

1. Windows 2000/XP.
2. Access to the same IP Subnet as the Vonage Adapter.
3. A working install of Cain.

The following diagram details the network configuration used for the tutorial.

Just days after the new Google Checkout system debuted, eBay has added the service to the list of banned payment methods. Some would have you believe that eBay is clearly attempting to undermine Google Checkout. This may be true, but a more likely scenario is simply the fact the Google Payments has no track record to prove it is a viable option for payments on eBay.