If you followed the recent security saga about the Asterisk and caller ID spoofing and Vishing attacks, Digium has issued a very explanatory post on their website, SIP Security and Asterisk
This should clear any doubts about Asterisk's security measures and bugs. Also how the SIP Security should be addressed. But as always security is a continuous challenge and continue to be vigilant.
It is must read and once you are done with it you may also want to read the new IC3 warning with the update.
You should get to know IC3.GOV in any case, if you are an Internet user.
Tuesday, December 09, 2008