#calleridspoofing — Public Fediverse posts

Finland's "Scam call and payment fraud prevention" has won 2025 European Crime Prevention Award:

https://www.eucpn.org/document/finland-scam-call-and-payment-fraud-prevention

While this scheme works it naturally hasn't prevented call-based fraud fully. However, at least the scammers can't easily call from outside of the country with forged #callerid

#fraudprevention #scamprevention #calleridspoofing

Today's #TechIsShitDispatch is about telephone scammers and the shitty tech that enables them.
I have an eldery relative whom I help pretty extensively with managing his medical care and his everyday life. I currently have his home phone forwarding to mine while he's in rehab.
In the past 24 hours I have received no less than *** 17 *** scam/spam calls to that phone number. That's a typical, not at all unusual volume for these calls.
#telephony #infosec #CallerIDSpoofing #Vonage
🧵1/7

The last time I saw headlines fill with news of somebody trying to kill a current, former or would-be president was 1981. I would have liked to see that streak continue instead of ending Saturday with the attempted assassination of Donald Trump at his rally in Pennsylvania and the murder of attendee Corey Comperatore. The U.S. has all sorts of problems–some the fault of Trump and his ilk–but gunning down politicians will not solve them and will spawn more horrible problems.

7/9/2024: Inside Uber’s new plan to route around traffic at the Paris Olympics, Fast Company

My first reaction to Uber pitching me on news that it was adding crash and traffic reporting to its driver app was surprise that they didn’t already offer that feature. My subsequent conversation with an Uber executive about the company’s plans to scale up for the Paris Olympics revealed some other changes it’s been making to improve the pickup experience–and one possible improvement that is not on its road map.

7/11/2024: Mint Mobile Adds Free Roaming in Canada to All Plans, PCMag

I was going to invoke poutine in the lede of this post, but after seeing the advance copy of the press release that T-Mobile PR provided me lean on that Canadian culinary trope, I went with Canadian city scenery instead.

7/12/2024: Exploring L.A. in a Waymo Robotaxi: Peaceful, Cautious, Sometimes Tardy, PCMag

I didn’t file this story right after getting back from Southern California because I needed to get some details confirmed by Waymo before I could write the post. And then I missed one detail anyway, whether Waymo has the equivalent of Uber’s surge pricing. I was enlightened about that error by a comment in a discussion of the story on Reddit’s r/waymo subreddit that I had joined to invite feedback on the piece, after which I corrected that line. Afterwards, I posted extra photos of my Waymo rides to a Flickr album.

7/12/2024: AT&T Data Breach Fallout: Watch Out for Targeted Texts, Spoofed Calls, PCMag

After seeing the news of the theft of calling and texting records of AT&T wireless customers, I immediately thought of how much the National Security Agency values that kind of metadata, then thought about how it could be abused by scammers once it inevitably goes on sale. Unless that somehow doesn’t happen: Sunday afternoon, Kim Zetter reported for Wired that AT&T paid a little over $374,000 in Bitcoin to a member of the hacking team to delete the data and provide video confirmation of the deletion.

https://robpegoraro.com/2024/07/14/weekly-output-uber-in-paris-mint-mobile-in-canada-waymo-in-l-a-fallout-of-att-data-breach/

#ATTDataBreach #autonomousVehicles #CallerIDSpoofing #CanadaRoaming #internationalRoaming #JaguarIPace #LosAngeles #MintMobile #ParisOlympics #selfDrivingCars #socialEngineering #Uber #Waymo

The last time I saw headlines fill with news of somebody trying to kill a current, former or would-be president was 1981. I would have liked to see that streak continue instead of ending Saturday with the attempted assassination of Donald Trump at his rally in Pennsylvania and the murder of attendee Corey Comperatore. The U.S. has all sorts of problems–some the fault of Trump and his ilk–but gunning down politicians will not solve them and will spawn more horrible problems.

7/9/2024: Inside Uber’s new plan to route around traffic at the Paris Olympics, Fast Company

My first reaction to Uber pitching me on news that it was adding crash and traffic reporting to its driver app was surprise that they didn’t already offer that feature. My subsequent conversation with an Uber executive about the company’s plans to scale up for the Paris Olympics revealed some other changes it’s been making to improve the pickup experience–and one possible improvement that is not on its road map.

7/11/2024: Mint Mobile Adds Free Roaming in Canada to All Plans, PCMag

I was going to invoke poutine in the lede of this post, but after seeing the advance copy of the press release that T-Mobile PR provided me lean on that Canadian culinary trope, I went with Canadian city scenery instead.

7/12/2024: Exploring L.A. in a Waymo Robotaxi: Peaceful, Cautious, Sometimes Tardy, PCMag

I didn’t file this story right after getting back from Southern California because I needed to get some details confirmed by Waymo before I could write the post. And then I missed one detail anyway, whether Waymo has the equivalent of Uber’s surge pricing. I was enlightened about that error by a comment in a discussion of the story on Reddit’s r/waymo subreddit that I had joined to invite feedback on the piece, after which I corrected that line. Afterwards, I posted extra photos of my Waymo rides to a Flickr album.

7/12/2024: AT&T Data Breach Fallout: Watch Out for Targeted Texts, Spoofed Calls, PCMag

After seeing the news of the theft of calling and texting records of AT&T wireless customers, I immediately thought of how much the National Security Agency values that kind of metadata, then thought about how it could be abused by scammers once it inevitably goes on sale. Unless that somehow doesn’t happen: Sunday afternoon, Kim Zetter reported for Wired that AT&T paid a little over $374,000 in Bitcoin to a member of the hacking team to delete the data and provide video confirmation of the deletion.

https://robpegoraro.com/2024/07/14/weekly-output-uber-in-paris-mint-mobile-in-canada-waymo-in-l-a-fallout-of-att-data-breach/

#ATTDataBreach #autonomousVehicles #CallerIDSpoofing #CanadaRoaming #internationalRoaming #JaguarIPace #LosAngeles #MintMobile #ParisOlympics #selfDrivingCars #socialEngineering #Uber #Waymo

The last time I saw headlines fill with news of somebody trying to kill a current, former or would-be president was 1981. I would have liked to see that streak continue instead of ending Saturday with the attempted assassination of Donald Trump at his rally in Pennsylvania and the murder of attendee Corey Comperatore. The U.S. has all sorts of problems–some the fault of Trump and his ilk–but gunning down politicians will not solve them and will spawn more horrible problems.

7/9/2024: Inside Uber’s new plan to route around traffic at the Paris Olympics, Fast Company

My first reaction to Uber pitching me on news that it was adding crash and traffic reporting to its driver app was surprise that they didn’t already offer that feature. My subsequent conversation with an Uber executive about the company’s plans to scale up for the Paris Olympics revealed some other changes it’s been making to improve the pickup experience–and one possible improvement that is not on its road map.

7/11/2024: Mint Mobile Adds Free Roaming in Canada to All Plans, PCMag

I was going to invoke poutine in the lede of this post, but after seeing the advance copy of the press release that T-Mobile PR provided me lean on that Canadian culinary trope, I went with Canadian city scenery instead.

7/12/2024: Exploring L.A. in a Waymo Robotaxi: Peaceful, Cautious, Sometimes Tardy, PCMag

I didn’t file this story right after getting back from Southern California because I needed to get some details confirmed by Waymo before I could write the post. And then I missed one detail anyway, whether Waymo has the equivalent of Uber’s surge pricing. I was enlightened about that error by a comment in a discussion of the story on Reddit’s r/waymo subreddit that I had joined to invite feedback on the piece, after which I corrected that line. Afterwards, I posted extra photos of my Waymo rides to a Flickr album.

7/12/2024: AT&T Data Breach Fallout: Watch Out for Targeted Texts, Spoofed Calls, PCMag

After seeing the news of the theft of calling and texting records of AT&T wireless customers, I immediately thought of how much the National Security Agency values that kind of metadata, then thought about how it could be abused by scammers once it inevitably goes on sale. Unless that somehow doesn’t happen: Sunday afternoon, Kim Zetter reported for Wired that AT&T paid a little over $374,000 in Bitcoin to a member of the hacking team to delete the data and provide video confirmation of the deletion.

https://robpegoraro.com/2024/07/14/weekly-output-uber-in-paris-mint-mobile-in-canada-waymo-in-l-a-fallout-of-att-data-breach/

#ATTDataBreach #autonomousVehicles #CallerIDSpoofing #CanadaRoaming #internationalRoaming #JaguarIPace #LosAngeles #MintMobile #ParisOlympics #selfDrivingCars #socialEngineering #Uber #Waymo

As I understand it there were quite some challenges in implementing this #calleridspoofing blocking. My understanding is that the global telephony system is an ancient #hack which can’t really be changed quickly or easily. Any solution that would require major changes or replacing hardware or software globally is unlikely to get much traction. So any relatively quick and robust solution to this problem has to be a local one, and cannot trust any outside co-operation. A major problem is also that the spoofing capabilities have legitimate use cases, which you don’t want to nuke in the process of implementing the spoofing protection.

In Finland, the telcos and #Traficom worked together: Number of different technical solutions were proposed, tested and the best solution(s) were selected, and eventually implemented. I’m sure that something like this has also been done elsewhere, too, or there are ongoing plans to implement something similar.

There are limitations to the solution too: It does not protect spoofing foreign numbers, nor does it protect attacks towards foreign users who are roaming in Finnish networks. It doesn’t not prevent abuse via hacking the #SS7 system itself. It does however block one major attack vector that has been exploited by international fraudsters.

Ajit Pai follows Congress’ instructions, requires new anti-robocall tech - Enlarge (credit: Getty Images | MassimoVernicesole)
Phone companies would be required to deploy t... more: https://arstechnica.com/?p=1658723 #calleridspoofing #stir/shaken #robocalls #callerid #policy #fcc