There's warnings about organized crime getting their hands on the tech (not like they can't jack your landlines already). To my mind, that includes the Bush administration. And there may be no legal way to stop it. This is essentially a packet sniffer, old well established tech. I don't think it's illegal to load a trojan on your own machine.
Expert scares world with VoIP hacking proof
Ex-BorderWare guru strips IP calls naked.
John E. Dunn, Techworld
22 November 2007
An expert has released a proof-of-concept program to show how easy it would be for criminals to eavesdrop on the VoIP-based phone calls of any company using the technology.
Called SIPtap, the software is able to monitor multiple Voice-over-IP (VoIP) call streams, listening in and recording them for remote inspection as .wav files. All that the criminal would need would be to infect a single PC inside the network with a Trojan incorporating these functions, although the hack would work at ISP level as well.
The program can index 'IP-tapped' calls by caller - using SIP identity information - and by recipient, and even by date. Running from August this year until the most recent tap on November 21st, SIPtap had no problems in extracting enough information on the test network to prove that call recording of any and every VoIP call at a hypothetical company was now a trivial exercise.
SIPtap demonstrates that the worst-case nightmares of VoIP vulnerability are now well within the capabilities of organised crime, which could use such a program to steal confidential data from companies, governments and even the police.
Delicious
Digg
Reddit
Newsvine
Furl
Google
Yahoo
