Follow the money this week. LiveKit switched to per-second billing, a small pricing change that says a lot about what voice AI workloads really look like. And while the vendors are busy metering, two unrelated malware families found their own uses for WebRTC - one hiding its C2 inside Microsoft Teams’ TURN relay, the other opening a live screen-share for its operator.
⭐ Tsahi’s Pick
Introducing per-second metering for LiveKit (LiveKit)
LiveKit is moving from per-minute to per-second billing, with a ten-second minimum. This is across agent sessions, recording, and both WebRTC and SIP connections. The trigger is outbound voice agents: a wrong number or an answering machine can end the call in seconds, but the old per-minute pricing charged for the full minute regardless. I wonder if other vendors will follow this approach or stick to per-minute pricing.
📰 This Week in WebRTC
The New Security Requirements for Real-Time Video Infrastructure (Stream) - how deep fakes are affecting security requirements in video meetings
Tracing calls through backend components (Jitsi) - a GSoC project wires OpenTelemetry through Meet, Prosody, Jicofo and JVB
Bandwidth vs Latency: What Matters for Live Streaming? (Red5) - both :-)
Living Off the Cloud: A Python Implant Hiding Its Entire C2 Inside Microsoft 365 & Azure (Ontinue) - the first malware spotted running its C2 over WebRTC DataChannels, relayed straight through Microsoft Teams’ own TURN servers
Manic: Blend between Banking Malware & Spyware (ThreatFabric) - Android malware that opens a live WebRTC screen-share straight to the operator, PIN capture included
AI and the Economics of Legacy Software (Alex Ballesté) - reviving an abandoned open-source WebRTC video platform with AI, and why the code was never the hard part
📣 Sponsors
Meet Sipfront live on 26th August
Discover the all-in-one voice and WebRTC testing platform trusted by NFON, Parloa, and sipgate. Join Sipfront for a live demo on 26 August.
Voice Agent testing by the experts at WebRTC.ventures
Bringing ten years of WebRTC engineering and production-grade QA to the rapidly evolving field of AI voice agent testing.
📢 Releases
Video Client SDK 2.35.1 Release: Promises and Scalable Layer Selection - Vonage adds Promise/async support without breaking callbacks, plus a public API to set SVC scalability mode directly
✍️ This Week on BlogGeek.me
What your support team actually needs to know about WebRTC - a call leaves almost no evidence once it ends, so generic support playbooks don’t work. Here’s the one-page framework that does