<P><SPAN class=headline></SPAN> </P>
<P><SPAN class=headline>Skype security and privacy concerns</SPAN><BR><SPAN class=author><A title=mailto:scott@granneman.com href="mailto:scott@granneman.com">Scott Granneman</A></SPAN>, <SPAN class=date>2005-09-22</SPAN><?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p></P>
<P class=firstparagraph><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"></SPAN></FONT> </P>
<P class=firstparagraph><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">One of my stranger hobbies is collecting interesting and weird anecdotes I find in the news. I have a few areas that always fascinate me, such as finding people who miraculously escape certain death, or items about human memory and cognition, or eccentric individuals who embody some strange aspect of the human condition. </SPAN></FONT></P>
<P class=firstparagraph><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"></SPAN></FONT> </P>
<P class=firstparagraph><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"></SPAN></FONT><SPAN class=body><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Some of my favorites, though, are the stories of folks who lose something and then have it returned to them, years or sometimes decades later. <o:p></o:p></SPAN></FONT></SPAN></P>
<UL type=disc>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l1 level1 lfo2"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">A German man <A title=http://story.news.yahoo.com/news?tmpl=story2&u=/nm/odd_germany_suitcase_dc href="http://story.news.yahoo.com/news?tmpl=story2&u=/nm/odd_germany_suitcase_dc">lost his suitcase in 1979</A> while traveling in <?xml:namespace prefix = st1 ns = "urn:schemas-microsoft-com:office:smarttags" /><st1:country-region w:st="on"><st1:place w:st="on">Senegal</st1:place></st1:country-region>. 24 years later, police in <st1:City w:st="on"><st1:place w:st="on">Dusseldorf</st1:place></st1:City> found his luggage and notified the 61-year-old. At first he didn't want to reclaim the suitcase, since it was stocked full of disco-era clothing that he didn't want to see, but his wife convinced him to go ahead and be a sport. There was no word on how well the orange leisure suit fit.<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l1 level1 lfo2"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">A <A title=http://customwire.ap.org/dynamic/stories/B/BALLOON_NOTE?SITE=TXAUS&SECTION=HOME&TEMPLATE=DEFAULT href="http://customwire.ap.org/dynamic/stories/B/BALLOON_NOTE?SITE=TXAUS&SECTION=HOME&TEMPLATE=DEFAULT">fourth-grader at Connoquenessing Elementary School</A> in <st1:place w:st="on"><st1:City w:st="on">Butler</st1:City>, <st1:State w:st="on">Pennsylvania</st1:State></st1:place>, sent a laminated card aloft in the 1980s by attaching it to a green balloon. The note asked the finder to send it back to the school. Twenty years later, a farmer named Robert Brindle, who lived about 170 miles away from <st1:City w:st="on"><st1:place w:st="on">Butler</st1:place></st1:City>, sent the card to the school, who passed it along to the now 30-year-old man who had launched it years
earlier.<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l1 level1 lfo2"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"><A title=http://news.yahoo.com/news?tmpl=story&u=/ap/20050404/ap_on_fe_st/wallet_returned href="http://news.yahoo.com/news?tmpl=story&u=/ap/20050404/ap_on_fe_st/wallet_returned">Lisa Tonks, of Peru, Indiana</A>, was vacationing with her family at <st1:place w:st="on"><st1:PlaceName w:st="on">Yellowstone</st1:PlaceName> <st1:PlaceType w:st="on">National Park</st1:PlaceType></st1:place> in the 1980s when she lost her wallet. Twenty years passed as the wallet sat in a police evidence room gathering dust. A police technician saw the wallet, noticed the Social Security card in it, traced the number to Tonks, and sent the wallet back to the grateful woman ... along with the $177 that had remained safely in it for two decades.<o:p></o:p></SPAN></FONT> </LI></UL>
<P><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Those are great stories (readers who are aware of more, feel free to send 'em my way!), but in each case, someone loses something, only to regain it again, long after they'd given up hope of ever seeing it again. Of course, these are the exceptions. I lost my wallet about twenty years ago in a movie theater in <st1:place w:st="on"><st1:City w:st="on">Kansas City</st1:City>, <st1:State w:st="on">Missouri</st1:State></st1:place>, and I've never heard tell of it since. But that's nothing: I've lost shoes, umbrellas, books, pictures, CDs, sunglasses, and even underwear (don't ask). None of it has ever made its way back to me. <o:p></o:p></SPAN></FONT></P>
<P><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">The big story in the news over the last week or so hasn't been about a loss, however - it's been about a gain. eBay agreed to purchase <A title=http://en.wikipedia.org/wiki/Skype href="http://en.wikipedia.org/wiki/Skype">Skype</A>, a peer-to-peer-based <A title=http://en.wikipedia.org/wiki/Voip href="http://en.wikipedia.org/wiki/Voip">Voice over IP (VoIP)</A> app, for <A title=http://news.com.com/eBay+to+nab+Skype+for+2.6+billion/2100-1030_3-5860055.html href="http://news.com.com/eBay+to+nab+Skype+for+2.6+billion/2100-1030_3-5860055.html">a whopping $1.3 billion in cash and $1.3 billion in stock</A>, with another $1.5 billion to come down the road if Skype met financial targets by 2008. VoIP has been in the news a lot in recent months, with Microsoft <A title=http://news.bbc.co.uk/1/hi/business/4200126.stm href="http://news.bbc.co.uk/1/hi/business/4200126.stm">buying</A> <A title=http://teleo.msn.com/
href="http://teleo.msn.com/">Teleo</A>, Google <A title=http://news.bbc.co.uk/1/hi/technology/4180182.stm href="http://news.bbc.co.uk/1/hi/technology/4180182.stm">rolling out</A> <A title=http://www.google.com/talk/ href="http://www.google.com/talk/">Google Talk</A>, Yahoo! <A title=http://www.eweek.com/article2/0,1895,1828885,00.asp href="http://www.eweek.com/article2/0,1895,1828885,00.asp">acquiring</A> <A title=http://www.dialpad.com/ href="http://www.dialpad.com/">Dialpad</A>, and even <A title=http://www.eweek.com/article2/0,1759,1861211,00.asp href="http://www.eweek.com/article2/0,1759,1861211,00.asp">AOL introducing a new service</A> designed to let users make phone calls over the Net. Now eBay is joining the party by snapping up Skype. <o:p></o:p></SPAN></FONT></P>
<P><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">I'm not really interested in why eBay bought Skype (although I'm pretty sure it's to make it easier for bidders to contact sellers) or whether or not the auction giant paid too much money or not (the general consensus seems to be, "Oh yeah!") for a company that has <A title=http://news.com.com/eBay+to+nab+Skype+for+2.6+billion/2100-1030_3-5860055.html href="http://news.com.com/eBay+to+nab+Skype+for+2.6+billion/2100-1030_3-5860055.html">made $60 million this year but has yet to post a profit</A>. I'm more interested in what the purchase of Skype means for security. <o:p></o:p></SPAN></FONT></P>
<H2><B><FONT face="Times New Roman" size=5><SPAN style="FONT-SIZE: 18pt">What's that you said?<o:p></o:p></SPAN></FONT></B></H2>
<P class=MsoNormal><SPAN class=body><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Skype has many things going for it. Among the various software-based VoIP apps (which thereby excludes hardware-based offerings like Vonage from consideration), Skype probably works the best in terms of computer-to-computer, computer-to-land line, and computer-to-cell based calling. It's easy to set up and use, and it works on Windows, Mac OS, and Linux boxes. Skype also provides more than just VoIP, with IM and file transfer also available. I've used it quite a bit, and overall, I've been happy with its sound quality, as have many other people, given that the program has been downloaded more than 100 million times. It has more than <A title=http://news.com.com/Bloggers+debate+impact+of+Skype+acquisition/2100-1038_3-5861754.html href="http://news.com.com/Bloggers+debate+impact+of+Skype+acquisition/2100-1038_3-5861754.html">52 million registered users (among those 2 million paying
customers)</A>, and well over 3 million people are online and using the program right now, as I'm typing this column. <o:p></o:p></SPAN></FONT></SPAN></P>
<P><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">But that doesn't mean that Skype is perfect. Far from it. <A title=http://support.skype.com/index.php?_a=knowledgebase&_j=questiondetails&_i=145 href="http://support.skype.com/index.php?_a=knowledgebase&_j=questiondetails&_i=145">Skype claims that it uses strong encryption</A> to protect phone calls, IM messages, and file transfers: <o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">"Skype uses AES (Advanced Encryption Standard), also known as Rijndael, which is used by U.S. Government organizations to protect sensitive, information. Skype uses 256-bit encryption, which has a total of 1.1 x 1077 possible keys, in order to actively encrypt the data in each Skype call or instant message. Skype uses 1024 bit RSA to negotiate symmetric AES keys. User public keys are certified by the Skype server at login using 1536 or 2048-bit RSA certificates."<o:p></o:p></SPAN></FONT></P>
<P><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Here's the problem with that statement: since <A title=http://support.skype.com/index.php?_a=knowledgebase&_j=questiondetails&_i=154 href="http://support.skype.com/index.php?_a=knowledgebase&_j=questiondetails&_i=154">Skype is an insistently closed source program</A> - and one that additionally uses a <A title=http://support.skype.com/index.php?_a=knowledgebase&_j=questiondetails&_i=153 href="http://support.skype.com/index.php?_a=knowledgebase&_j=questiondetails&_i=153">proprietary protocol</A>, but I'll get to that in a moment - we have no way of verifying Skype's security. We simply have to take them at their word that their encryption works. For such an important program, that's quite a problem. I'm just not sure how safe I feel when Skype says, "Trust me - everything's going to be fine." <o:p></o:p></SPAN></FONT></P>
<H2><B><FONT face="Times New Roman" size=5><SPAN style="FONT-SIZE: 18pt">Say what?!<o:p></o:p></SPAN></FONT></B></H2>
<P class=MsoNormal><SPAN class=body><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">That's bad enough, but now Skype is going to be owned by eBay. I know that lots of people just loooove eBay. I use them myself, most recently to enhance my Li'l Abner comics collection, but I'm careful about the information I give them. Why? Well, it seems that there are three kinds of companies: those that fight for customers' privacy in the face of the demands of law enforcement; those that require some sort of official, constitutionally-mandated documents - like, oh, say, a warrant or subpoena - before handing over customer info to the cops; and eBay. <o:p></o:p></SPAN></FONT></SPAN></P>
<P><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Think I'm being a little harsh on eBay? At the CyberCrime 2003 conference, Joseph E. Sullivan, Director of Compliance and Law Enforcement Relations for eBay, <A title=http://research.yale.edu/lawmeme/modules.php?name=News&file=article&sid=925 href="http://research.yale.edu/lawmeme/modules.php?name=News&file=article&sid=925">had this to say to a group of law enforcement officials</A>: <o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">"I know from investigating eBay fraud cases that eBay has probably the most generous policy of any internet company when it comes to sharing information. We do not require a subpoena except for very limited circumstances. We require a subpoena when we need the financial information from the site, credit card info or sometimes IP information. ... So, that really opens the door for us. That means that what our policy is that if you are law enforcement agency you can fax us on your letterhead to request information: who is that beyond the seller ID, who is beyond this user ID. We give you their name, their address, their e-mail address and we can give you their sales history without a subpoena. ... We will probably tell you too that you might want to get a subpoena because we are looking for credit card info and you ask that. ... We also do other things to facilitate your investigation by looking and
doing some searches around on our own, typically to see if there are some other user ID's associated with that thing. ... We are doing a lot of work with law enforcement agencies." <o:p></o:p></SPAN></FONT></P>
<P><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">I'm nearly speechless after reading Sullivan's comments. Think about what he's saying: if eBay receives a fax on offical letterhead (not that <EM><I><FONT face="Times New Roman">that</FONT></I></EM> would ever be faked, oh no) - just a simple fax, mind you, just a fax, unaccompanied by a court order - it will <A title=http://research.yale.edu/lawmeme/modules.php?name=News&file=article&sid=925 href="http://research.yale.edu/lawmeme/modules.php?name=News&file=article&sid=925">gladly fork over the following info about you</A>, or any other eBay user: <o:p></o:p></SPAN></FONT></P>
<UL type=disc>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Full name<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">User ID<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Email address<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Street address<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">State<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">City<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">ZIP code<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Phone number<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Country<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Company<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Password<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Secondary phone number<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Gender<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Shipping information (including name, street address, city, state, ZIP)<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Bidding history on an item<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Items for sale<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Feedback left about the user<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Bidding history<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Prices paid for items<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Feedback rating<o:p></o:p></SPAN></FONT>
<LI class=MsoNormal style="mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l2 level1 lfo3"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Chat room and bulletin board posts<o:p></o:p></SPAN></FONT> </LI></UL>
<P><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Understatement of the week: that is one hell of a list! It's long, it's scary, and it's troubling. So what do we have? Software that says it's completely secure, but without a good way to verify that claim, now owned by a company that will basically give up an astonishing amount of personal information about you at the slightest peep from the authorities. This looks and smells bad. It's a questionable act to trust your personal and business phone calls, instant messages, and file transfers to Skype already, but it seems almost the height of foolhardiness to do the same now with a Skype owned by eBay. <o:p></o:p></SPAN></FONT></P>
<H2><B><FONT face="Times New Roman" size=5><SPAN style="FONT-SIZE: 18pt">Listen up!<o:p></o:p></SPAN></FONT></B></H2>
<P class=MsoNormal><SPAN class=body><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">So is there any alternative to Skype? Sure! In particular, I'm keeping my eye on <A title=http://www.gizmoproject.com href="http://www.gizmoproject.com/">Gizmo Project</A>. Sure there are similarities: both are easy to use, install on Win/Mac/Lin, <A title=http://forum.gizmoproject.com/viewtopic.php?p=767&sid=94b9f82309a48c8df45dbcd7b05ebb43#767 href="http://forum.gizmoproject.com/viewtopic.php?p=767&sid=94b9f82309a48c8df45dbcd7b05ebb43#767">utilize encryption</A> (although so far we don't kind what kind of encryption scheme Gizmo Project is using), and enable users to make calls to and receive calls from landline and cell phones (both are also closed source, although it appears that <A title=http://forum.gizmoproject.com/viewtopic.php?p=1797&sid=94b9f82309a48c8df45dbcd7b05ebb43#1797
href="http://forum.gizmoproject.com/viewtopic.php?p=1797&sid=94b9f82309a48c8df45dbcd7b05ebb43#1797">portions of Gizmo will be open sourced</A>, so we'll be able to verify at least part of what Gizmo Project says about itself). However, Gizmo Project differs from Skype in several key ways. Where Skype uses its own proprietary protocol, Gizmo Project uses the open SIP (<A title=http://en.wikipedia.org/wiki/Session_Initiation_Protocol href="http://en.wikipedia.org/wiki/Session_Initiation_Protocol">Session Initiation Protocol</A>) standard (and it <A title=http://voip-blog.com/2005/09/16/jabber-with-gizmo/ href="http://voip-blog.com/2005/09/16/jabber-with-gizmo/">now supports the open Jabber protocol for IM</A>). But here's the biggie: where Skype only allows free VoIP calls to other Skype users, Gizmo Project is committed to interoperability, so that it will be able to interconnect with any SIP-compatible VoIP system. Gizmo Project isn't anywhere near finished yet, but it is good
enought to test, and if its current status is any indication, it's going to be one to contend with... especially if the new eBay Skype is as problematic as I'm worried it will be. <o:p></o:p></SPAN></FONT></SPAN></P>
<P><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Of course, these other services are not perfect. Skype is decentralized thanks to its peer-to-peer nature, which makes it somewhat harder to track and wiretap, while most of the other services - like Gizmo - are centralized around a few servers. If the US FedGov really wants to, it'll be a lot easier to set up some sort of Carnivore-type server in place that looks at all traffic used by those services. Encryption sure helps in that scenario ... until your phone call hits the PSTN (Public Switched Telephone Network), or the boys up in <st1:State w:st="on"><st1:place w:st="on">Washington</st1:place></st1:State> start demanding a back door key. And guess what? The title of this FCC press release, dated 5 August 2005, says it all: <A title=http://hraunfoss.fcc.gov/edocs_public/attachmatch/DOC-260434A1.pdf href="http://hraunfoss.fcc.gov/edocs_public/attachmatch/DOC-260434A1.pdf">FCC Requires Certain Broadband and VoIP
Providers to Accommodate Wiretaps</A> (110 kb PDF). Gulp. <o:p></o:p></SPAN></FONT></P>
<P><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Things are about to get very interesting in the VoIP world. There are simply too many 800 pound gorillas - both corporate and governmental - throwing their weight around. As security pros, we need to watch this space, while insisting on a few basic principles: openness, support for standards, and interoperability. If eBay goes down the wrong path with Skype, we need to move ourselves - and our friends, families, and business associates - to a more open, yet secure, alternative. If we don't keep our eyes - and ears, naturally! - open, we could find, after a few years, that we've lost something special, and there's no possiblity of getting it back. <o:p></o:p></SPAN></FONT></P>
<H2><B><FONT face="Times New Roman" size=5><SPAN style="FONT-SIZE: 18pt">Further <st1:City w:st="on"><st1:place w:st="on">Reading</st1:place></st1:City><o:p></o:p></SPAN></FONT></B></H2>
<P class=MsoNormal style="MARGIN-BOTTOM: 12pt"><SPAN class=body><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Kuhn, D. Richard, Thomas J. Walsh, and Steffen Fries. </SPAN></FONT></SPAN><EM><I><FONT face="Times New Roman">Security Considerations for Voice Over IP Systems: Recommendations of the National <st1:place w:st="on"><st1:PlaceType w:st="on">Institute</st1:PlaceType> of <st1:PlaceName w:st="on">Standards</st1:PlaceName></st1:place> and Technology</FONT></I></EM><SPAN class=body>. NIST Special Publication 800-58 (January 2005). <A title=http://csrc.nist.gov/publications/nistpubs/800-58/SP800-58-final.pdf href="http://csrc.nist.gov/publications/nistpubs/800-58/SP800-58-final.pdf">http://csrc.nist.gov/publications/nistpubs/800-58/SP800-58-final.pdf</A>. </SPAN><o:p></o:p></P>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Scott Granneman is a senior consultant for Bryan Consulting Inc. in <st1:City w:st="on"><st1:place w:st="on">St. Louis</st1:place></st1:City>. He specializes in Internet Services and developing Web applications for corporate, educational, and institutional clients. <o:p></o:p></SPAN></FONT></P><BR><BR><DIV>
<DIV>
<P align=center><EM><FONT face="Comic Sans MS" color=#407f00 size=4><STRONG>Titi Akinsanmi</STRONG></FONT></EM></P>
<P align=center><STRONG><EM><FONT face="Comic Sans MS"><A href="http://www.pin.itgo.com/"><FONT color=#407f00>www.pin.itgo.com</FONT></A><FONT color=#407f00> </FONT></FONT></EM></STRONG><STRONG><EM><FONT face="Comic Sans MS"><A href="http://www.ycdo.net"><FONT color=#407f00>www.ycdo.net</FONT></A><FONT color=#407f00> </FONT></FONT></EM></STRONG></P>
<P align=center><STRONG><EM><FONT face="Comic Sans MS"><A href="http://www.schoolnetafrica.net"><FONT color=#407f00>www.schoolnetafrica.net</FONT></A><FONT color=#407f00> </FONT><A href="http://www.globalteenager.org"><FONT color=#407f00>www.globalteenager.org</FONT></A><FONT color=#407f00> </FONT></FONT></EM></STRONG></P>
<P align=center><EM><FONT face="Comic Sans MS" color=#407f00 size=4><STRONG>IMPACT YOUR GENERATION!!!</STRONG></FONT></P></EM></DIV></DIV><p>
<hr size=1>Yahoo! for Good<br>
<a href="http://store.yahoo.com/redcross-donate3/">Click here to donate</a> to the Hurricane Katrina relief effort.