| reply to tommy13v
Re: [General] Trixbox phoning home controversy. Looks like from the perl script that this same approach is used by Trixbox Pro and Fonality to grab data from those systems too.
One hacker breaks into update.fonality.com and they can be running scripts on Fonality based PBX's across the world. As root. And I bet that the Fonality PBX's are almost all inside the firewall, so who knows how much damage this thing could do inside a company?
And the Fonality people fess up to Trixbox CE having the issue, but leave out that Fonality and Trixbox Pro systems are just as vulnerable. That really is pretty crappy behavior. |
