An anonymous reader writes "Users of Trixbox, a PBX based on Asterisk, discovered that the software has been calling home with their usage and statistics. From the article: "I have just been made aware of a file '/var/adm/bin/registry.pl' that contain the following commented lines describing the program:
# This file is design to be executed regularly by an external controller such as cron. # It retrieves a list of commands to be executed from the specified URI and executes them, saving the output # and returning it to the webserver as an encrypted string."
Trixbox is owned by Fonality, which makes customised PBXs (again based on asterisk) for paying customers and this is not the first time that Fonality has been called out for their data collection.
"The whole story": this is not news and was actually publicized a long time ago, before it was actually put into use, however, several overly paranoid, overly dramatic people were only just made aware that it was happening, and all of a sudden it has become: "my phone system is transmitting my credit card number to a multi-million dollar commercial entity who is only interested in robbing all the people who use its FREE software solution, because this established entity doesnt make any money on their commerc
this is way out of proportion (Score:1)
"my phone system is transmitting my credit card number to a multi-million dollar commercial entity who is only interested in robbing all the people who use its FREE software solution, because this established entity doesnt make any money on their commerc