News for hackers. Stuff that matters.
Re:A Data Leak Exposed the Personal Information of over 3k R... by dvtrn on Thursday December 19, 2019 @09:22PM (#21841259)
These “boutique” SIP providers (as I call them, Telnyx, Voipo, VoIP.ms etc) could really learn from their larger telecom counterpoints by allowing users to whitelist what IP ranges users can even authenticate from. Heck, even Linode offers this.
Re:A Data Leak Exposed the Personal Information of over 3k R... by mmmarnell on Friday December 20, 2019 @03:38PM (#21847197)
Telnyx offers IP whitelisting for inbound and outbound dialing on its platform as well.

https://sip.telnyx.com/

Re:A Data Leak Exposed the Personal Information of over 3k R... by dvtrn on Friday December 20, 2019 @06:39PM (#21848365)
Correct, though the commenter above and I were referring specifically to user interfaces where sensitive accounting details are stored and configured and would allow access to privileged systems and user controls.
Re:A Data Leak Exposed the Personal Information of over 3k R... by dboreham on Thursday December 19, 2019 @11:17PM (#21841681)
Vitelity has supported this for probably a decade.
Re:A Data Leak Exposed the Personal Information of over 3k R... by dvtrn on Thursday December 19, 2019 @11:40PM (#21841752)
Good! It’s been a long while since I’ve managed anything clients using Vitelity trunks, but recall having a generally positive experience, glad to hear they still run a good ship to have at least this mechanism.
Re:A Data Leak Exposed the Personal Information of over 3k R... by pdonis on Friday December 20, 2019 @12:00AM (#21841808)
How does this work if you're traveling? Logging in from a mobile phone?
Re:A Data Leak Exposed the Personal Information of over 3k R... by dvtrn on Friday December 20, 2019 @12:06AM (#21841838)
Self-Managed VPN, in our case.
Re:A Data Leak Exposed the Personal Information of over 3k R... by walrus01 on Friday December 20, 2019 @01:13AM (#21842047)
Typically you have your own IP pbx such as an asterisk system which lives in one place on static v4/v6 IPs, it connects to your upstream sip trunk. Your own clients such as zoiper on Android connect to that.
Re:A Data Leak Exposed the Personal Information of over 3k R... by Zod666 on Friday December 20, 2019 @02:42AM (#21842337)
I thought about using asterisk or something but does that noticeable latency when connecting remotely? Right now I connect directly to my sip provider on the go via an android sip client whereas running my own PBX would add another hop and was concerned how much this impacts latency.
Re:A Data Leak Exposed the Personal Information of over 3k R... by dvtrn on Friday December 20, 2019 @02:49AM (#21842375)
I'll open myself up for correction on the matter, but it's been my experience that these days Asterisk is more useful as and often more commonly deployed as a feature server (hunt-groups, ring-groups, call trees etc), at least for a broad majority of use cases where SIP is even a part of the conversation. Personally I'd not recommend one try rolling their own Ast based phone system for production/enterprise unless you just really want to and have literally no other projects to deliver back to the org.

Otherwise, what you're doing is perfectly fine and well enough: connect to your SIP trunk via credentials using a local client and you've more or less got a working, accessible phone number. Unless you truly have a need for Asterisk features, don't bother.

I happen to know first hand of a "voice company" that has a pretty sizeable footprint in the travel/hospitality industry making several million dollars a year and one of their products amounts to nothing more than configuring IVRs and charging through the nose to host them using what is (in my opinion alone) a thoroughly overly-complicated Asterisk infrastructure and similarly overly-complicated dial plans.