Live data from Hacker News

FCC will require phone carriers to authenticate calls by June 2021 [pdf]

docs.fcc.gov

91–100 of 352 posts

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#91

Earlier quoted context omitted.

What do you use for an ID? Passport card? State issued ID?

It's generally a bad idea to carry your passport around just because it has your SSN printed on it

Does it really? I can’t find anything to agree with that.

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#92
post #36

90% of my phone calls are from the same outfit informing me that this is my last chance to renew the extended warranty on my car. Based on my call history that recording is officially my best friend. And a very forgiving one given that it has been my last chance hundreds of times over the past several years. I hope this regulation won't interfere with our relationship.

Try registering a domain name without privacy.

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#93

Earlier quoted context omitted.

"Hi jimmy, this is your mother. My phone died so I am calling you from the hospital phone. Your dad is in the hospital. Come quick." In the above scenario that happened to me, sometimes you just don't have time to let the information find you.

Was your presence at the hospital going to aide in his treatment?

Wow...

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#94

Why is this problem unique to the USA? I'm not saying I never get spam calls, but I certainly have to scroll back quite a bit in my phone call history to see the last one. Also, on the rare occasion I do get a spam call it's always from some random international country like South Sudan or Oman that I would never expect a phone call from. What makes this problem uniquely hard to solve for the USA as opposed to anywhe…

Why is this problem unique to the USA? Every time this topic comes up on HN, someone asks that same question. Then there's a bunch of responses that are lots of suppositions. Then several people from small European countries chime in saying they've never had a spam call. Then a bunch of Europeans from large countries show up saying they get spam calls, too, and it's not just an American thing. "Why is this problem un…

I live in one of the largest countries in the EU and I receive one, maybe two, spam calls a month (and always coming from countries outside the EU). From what I understand from the never-ending list of articles about spam calls in the US, some receive tens, sometimes hundreds of spam calls every day! So yes, this problem is, from our EU perspective, unique to the USA.

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#95
Any ideas on how this will be implemented? I use voip.ms and I can put in my cell phone number as my caller ID so I don't need to pay for a DID (basically, rent a phone number) and calls come back to my cell.

I've thought about some potential SaaS products that would leverage a similar approach. But I would authenticate the number back to the customer before allowing it to be used to avoid spam/malicious use.

Based on this:

https://www.zdnet.com/article/at-t-comcast-successfully-test...

I'm guessing this is down a layer at the provider level. So in my case, voip.ms would verify the number I'm using as my caller ID is actually a number that comes back to me. Right now, I just tested by swapping my wife's cell number in, they do not validate this. Now I understand how people are spoofing numbers so easily.

Obvious approach is to voice call or text the number and require the confirmation code to be entered on the website. Just curious though if there are other requirements or if this is up to the provider.

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#96

I don't think SHAKEN/STIR will stop robocalls, because the economics won't change. It's too easy for foreign robocalls to cycle numbers once one gets blocked. It will help with impersonation, but I don't believe it will significantly decrease robocall volume. I think the telecommunications world will need to adopt whitelisting instead of blacklisting. I run a whitelist-based robocall blocking service called CallStop…

Can you extend a bit on that, maybe I'm not understanding the problem right. Isn't having calls being authenticated the first step before you have whitelist/blacklist? Once every call can be definitively attached to a given source, then you can ban any foreign provider that let's these proliferate completely, no?

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#97

Why is this problem unique to the USA? I'm not saying I never get spam calls, but I certainly have to scroll back quite a bit in my phone call history to see the last one. Also, on the rare occasion I do get a spam call it's always from some random international country like South Sudan or Oman that I would never expect a phone call from. What makes this problem uniquely hard to solve for the USA as opposed to anywhe…

Why is this problem unique to the USA? Every time this topic comes up on HN, someone asks that same question. Then there's a bunch of responses that are lots of suppositions. Then several people from small European countries chime in saying they've never had a spam call. Then a bunch of Europeans from large countries show up saying they get spam calls, too, and it's not just an American thing. "Why is this problem un…

I would not be surprised if turns out to be a bigger problem in the USA (and perhaps also Canada) than elsewhere simply because the USA is a bigger, easier-to-access pot of honey. It's a large area where everyone speaks the same language, lives in roughly the same regulatory and infrastructural environment, and has a lot of money to be scammed out of.

Europe is also a big pot of honey. But people speak all sorts of different languages, so you'd have to redo the scam in a bunch of different languages, which increases the effort needed to operate it.

China has way more people all speaking the same language, but relatively less wealth per person, which reduces the potential payoff. Also, I wouldn't be surprised if China has already closed off most the holes people exploit to operate these scams, because they seem less inclined than the US government to fart around about silly crap like this for literally decades on end.

Latin America has scads of people all speaking the same language, too, but they're split up among a whole bunch of different countries, which I'm guessing also makes the scam more expensive to operate at scale than it would be in the English-speaking bits of North America.

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#98

I don't think SHAKEN/STIR will stop robocalls, because the economics won't change. It's too easy for foreign robocalls to cycle numbers once one gets blocked. It will help with impersonation, but I don't believe it will significantly decrease robocall volume. I think the telecommunications world will need to adopt whitelisting instead of blacklisting. I run a whitelist-based robocall blocking service called CallStop…

How do you get a new US phone number? (I'll likely block anything from outside the US if authentication happens.)

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#99

Earlier quoted context omitted.

I've pushed that reflex further : if it's important, the information will find its way to me.

"Hi jimmy, this is your mother. My phone died so I am calling you from the hospital phone. Your dad is in the hospital. Come quick." In the above scenario that happened to me, sometimes you just don't have time to let the information find you.

While this is a possible scenario- in my experience most people know to call multiple times - especially if they know that the recipient won’t recognize the number.

I don’t usually answer my phone from unknown numbers, but when I get three calls from the same number within 3 minutes I’ll pick it up.

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#100

I don't think SHAKEN/STIR will stop robocalls, because the economics won't change. It's too easy for foreign robocalls to cycle numbers once one gets blocked. It will help with impersonation, but I don't believe it will significantly decrease robocall volume. I think the telecommunications world will need to adopt whitelisting instead of blacklisting. I run a whitelist-based robocall blocking service called CallStop…

Can you extend a bit on that, maybe I'm not understanding the problem right. Isn't having calls being authenticated the first step before you have whitelist/blacklist? Once every call can be definitively attached to a given source, then you can ban any foreign provider that let's these proliferate completely, no?

SHAKEN/STIR + Whitelisting is the best solution. SHAKEN/STIR by itself isn't going to change things too much I think. But it is a step in the right direction.

Whitelisting without SHAKEN/STIR is still extremely functional.

There are billions of unique American numbers possible, and with 250-500 average contacts per random dial, contact spoofing is not statistically significant.

Post reply on HN