Live data from Hacker News

FCC will require phone carriers to authenticate calls by June 2021 [pdf]

docs.fcc.gov

241–250 of 352 posts

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#241

How do services like Twilio stay compliant with this regulation?

I'm guessing they talk with the carriers regularly about being complaint. I asked them about it recently and they said in a response ticket they were following along with progressions in authentication. There may be someone who works for Twilio on this thread that has more info though.

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#242
post #210
post #184

Good. But really, why did this take this long? It should be relatively easy to identify the bad actors here and I don't mean the spammers, I mean the telcos that make this possible, deliberately so, by essentially "laundering" spam calls. My response to picking up a number is to answer the call and say nothing. Auto-dial systems will route the call to a person when they get a "live" response. I don't know the criteri…

It took this long because the fcc is run by people who simply do not believe in using government to enforce oversight.

extraordinary claims require extraordinary evidence.

Otherwise, every hyperbole will have to be considered as irrefutable truth.

Or, is the 'who comes up with wittiest hyperbole' is the type of 'thought exchange' framework you would like to engage in?

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#243
post #184

Good. But really, why did this take this long? It should be relatively easy to identify the bad actors here and I don't mean the spammers, I mean the telcos that make this possible, deliberately so, by essentially "laundering" spam calls. My response to picking up a number is to answer the call and say nothing. Auto-dial systems will route the call to a person when they get a "live" response. I don't know the criteri…

I mute the mic and mash the keypad until the other end disconnects, no matter how long that takes. I find I get far fewer such calls than I did when I started, and the occasional hopelessly snarled-up IVR system is a nice bonus.

i'm afraid there is an option that legally allows them o call me non-stop if I press 1 or something :) so i just mute and leave the phone on the desk to add some noise to their voice learning (and they have to pay for the call if it is over 4s)

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#244
post #147
post #127

Earlier quoted context omitted.

I just wish various Doctors and Dentists could jump on the text/email bandwagon. Those two groups are responsible for nearly all of my phone usage - with a slim minority (that is itself mostly spam) being calls from my bank.

They are subject to HIPAA comstraints.

More precisely an over-cautious interpretation of HIPAA that happens to annoy patients and is specifically called out by HHS.

Note that an individual has the right under the Privacy Rule to request and have a covered health care provider communicate with him or her by alternative means or at alternative locations, if reasonable. See 45 C.F.R. § 164.522(b). For example, a health care provider should accommodate an individual’s request to receive appointment reminders via e-mail, rather than on a postcard, if e-mail is a reasonable, alternative means for that provider to communicate with the patient. By the same token, however, if the use of unencrypted e-mail is unacceptable to a patient who requests confidential communications, other means of communicating with the patient, such as by more secure electronic methods, or by mail or telephone, should be offered and accommodated.

Patients may initiate communications with a provider using e-mail. If this situation occurs, the health care provider can assume (unless the patient has explicitly stated otherwise) that e-mail communications are acceptable to the individual. If the provider feels the patient may not be aware of the possible risks of using unencrypted e-mail, or has concerns about potential liability, the provider can alert the patient of those risks, and let the patient decide whether to continue e-mail communications.

https://www.hhs.gov/hipaa/for-professionals/faq/570/does-hip...

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#245
post #202
post #157

Earlier quoted context omitted.

From my understanding, it basically means all telecoms will be required to do what T-Mobile already does in the U.S. If I get a call and the reported Caller ID doesn't match the transmitted one, it reads on my phone as "Scam Likely". Pixels also have their own solution to this: If that condition occurs, the Google Assistant will answer the call and auto-decline if it is actually a robocall.

I think T-Mobile only does this for postpaid users though. Prepaid users are excluded AFAIK.

Wrong. Prepaid MVNO Metro By T-Mobile has this feature as well.

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#247
post #232
post #210

Earlier quoted context omitted.

It took this long because the fcc is run by people who simply do not believe in using government to enforce oversight.

We shouldn't interfere in the free market. Those robocalls are just good old American ingenuity.

People like to razz on it for being a free market, but it's really a gov. backed oligopy.

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#248
post #3

Does this mean I can start answering my phone again? Are there other vectors for spam calling which are not addressed by this solution?

I hope this addresses the abuse.

See [1]

It basically asks the telecom operators to implement digitally signed certificates.

So it would work, if I understand it conceptually, like your web browser, when it receives https traffic unsigned certificate, or https traffic from a domain that's not part of the certificate chain.

Therefore, this mandate will prevent 'spoofing'. And without spoofing, the spammers would necessarely have to reveal their identity, and there are already bunch of existing legislation to prevent them from doing this type of business.

I missed important business calls when in US. Because they were calling using same area code where my sim card was registered, so I thought it was from the area local to me.

It is horrible, I am sure people actually lost not just business value, but also had negative health impacting incidents, due to this abuse of telecommunications.

[1] https://transnexus.com/whitepapers/understanding-stir-shaken...

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#249
post #143

Earlier quoted context omitted.

Yeah this worked really well for me until the county health department called from an unknown number to tell me my child had been exposed to COVID-19.

Did they not leave a voicemail? Was there no transcription? How'd you end up getting the info?

They called my wife, who didn’t have that set.

They actually also emailed and texted us both so in reality there was no chance of us missing that specific message...

Re: FCC will require phone carriers to authenticate calls by June 2021 [pdf]

#250

Earlier quoted context omitted.

Why is this problem unique to the USA? Every time this topic comes up on HN, someone asks that same question. Then there's a bunch of responses that are lots of suppositions. Then several people from small European countries chime in saying they've never had a spam call. Then a bunch of Europeans from large countries show up saying they get spam calls, too, and it's not just an American thing. "Why is this problem un…

Oh, I can actually weigh in here. In the past ten years, I've spent significant amounts of time in the US, France and the UK. In the UK, I get the occasional spam call ("I'm calling with regards to the recent accident that wasn't your fault..."). At its peak, I got about one such call per week. It's been months since I've had a spam call. In France, I got zero. In the 7 years I lived there, I got exactly zero. Every…

Different people in the US have different experiences. Why is some random anecdote (assuming it's not made up) good enough to define xxx million people? I don't get 2-5 calls per day. My experience is more like what you describe with the UK. But that could be affected by my being on the do not call list on one hand, and on the other, occasionally answering a telemarketer by accident when I'm waiting for another call.
Post reply on HN