BlackHat Roundup – Ajax and h.323 and iax

The author summarizes BlackHat/Defcon talks highlighting security research against VoIP signaling protocols (H.323, IAX, SIP) and Ajax web applications, noting demonstrations of sniffing authentication traffic, offline MD5-based dictionary attacks to recover credentials, authorization weaknesses, and DoS techniques; the write-up emphasizes that these are reapplications of known attack methods rather than novel zero-day exploitation.