{"id":8918,"date":"2006-03-23T10:01:53","date_gmt":"2006-03-23T17:01:53","guid":{"rendered":"http:\/\/hill-kleerup.org\/blog\/wp\/2006\/03\/23\/got-your-number-3.html"},"modified":"2006-03-23T10:01:53","modified_gmt":"2006-03-23T17:01:53","slug":"got_your_number","status":"publish","type":"post","link":"https:\/\/hill-kleerup.org\/blog\/2006\/03\/23\/got_your_number.html","title":{"rendered":"Got your number"},"content":{"rendered":"

The Feds and States are beginning to take an interest<\/a> in Caller ID spoofing<\/a>.<\/p>\n

On Friday, [Florida] state Attorney General Charlie Crist issued subpoenas targeting five different spoofing sites. For four of them, the subpoenas are directed at the registrars handling the services’ anonymous domain name registrations, and are aimed at unmasking the owners of the sites. A fifth went directly to one of the spoofing sites, Tricktel.com, demanding business records and the identities of any Florida customers.<\/p>\n

“People use Caller ID to protect themselves from unwanted calls and contact from those who would do them harm,” Crist said in a press release. “It is wrong for individuals or businesses to deceive our citizens, and this cannot be allowed to continue unchecked.”<\/p>\n

[…] The probe comes on the heels of a broad federal investigation that began late last month, when the FCC issued letters to at least three Caller ID spoofing sites demanding detailed information on the structure of the businesses, as well as the names of every customer that has used the services, the dates they used them and the number of phone calls they made.<\/p><\/blockquote>\n

The concern is whether the spoofing is being done to perpetrate fraud or bypass Federal law on telemarketing.<\/p>\n

SpoofTel, which is based in Canada, says it’s outside of the Florida attorney general’s jurisdiction, but that the company doesn’t tolerate unlawful use of its service. “I would like to remind your readers that SpoofTel’s services are to be used for entertainment purposes only,” SpoofTel said in a statement.<\/p><\/blockquote>\n

Yeah. A million laughs, that Caller ID spoofing. And that rings as true as those disclaimers on fortune tellers that their services are “for entertainment purposes only.”<\/p>\n

[C]riminals have reportedly used the sites while making pretext phone calls to wheedle private information like bank account and Social Security numbers out of consumers and companies. Experts say the services have also been used to target businesses that rely on Caller ID for authentication — Western Union’s money-transfer service has been particularly vulnerable, as are T-Mobile voicemail boxes in their default configuration.<\/p>\n

“Primarily, we think that it’s a way for telemarketers to hide their identity, and consumers or citizens will be more likely to answer the phone if they don’t think it’s somebody trying to sell them something,” says Joanna Carrin, a spokeswoman for the Florida attorney general’s office. “We are using our deceptive and unfair business practices law to look into what these companies are doing.”<\/p><\/blockquote>\n

That’s entertainment!<\/p>\n

Now, there are potentially some legit uses for the services.<\/p>\n

Despite the obvious deception involved, Del Bianco says spoofing services are primarily used for lawful aims. “We’re talking about private investigators, skip tracers, law enforcement agencies, attorneys, others who are legitimately trying to locate people to enforce their rights or in many cases the rights of the public,” he says. “There are lots of legitimate uses of this.”<\/p>\n

[…] Chris Hoofnagle, an attorney with the Electronic Privacy Information Center, says he thinks Caller ID spoofing has legitimate uses, and would rather see fraudsters prosecuted for their crimes than have spoofing sites categorized as burglar tools. “I think the thing to do here is to prosecute the underlying fraud,” says Hoofnagle. “It seems to me it could be a privacy-enhancing technology that has useful purposes. For instance to call a police tip line or a newspaper perhaps.”<\/p><\/blockquote>\n

Frankly, I mistrust “legitimate” activities that rely on deceit, except in limited cases, though I agree that the underlying crimes are what should be punished. But the latter comment by Hoofnagle is silly; Caller ID blocking is quite different than Caller ID spoofing. One protects privacy, the other is essentially lying. I don’t see any reason to protect that, even if it’s potentially usable “for entertainment purposes.”<\/p>\n","protected":false},"excerpt":{"rendered":"

The Feds and States are beginning to take an interest in Caller ID spoofing. On Friday, [Florida] state Attorney General Charlie Crist issued subpoenas targeting five different spoofing sites. For…<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[20,39],"tags":[],"class_list":["post-8918","post","type-post","status-publish","format-standard","hentry","category-hi-tech","category-spam"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":9013,"url":"https:\/\/hill-kleerup.org\/blog\/2006\/03\/06\/so_much_for_cal.html","url_meta":{"origin":8918,"position":0},"title":"So much for Caller ID","author":"***Dave","date":"Mon 6-Mar-06 11:48am","format":false,"excerpt":"It's become trivial to spoof Caller ID, at least for those who want to go to the effort of doing so. In the last few years, Caller ID spoofing has...","rel":"","context":"In "Hi-Tech"","block_context":{"text":"Hi-Tech","link":"https:\/\/hill-kleerup.org\/blog\/category\/hi-tech"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":48387,"url":"https:\/\/hill-kleerup.org\/blog\/2014\/11\/17\/when-i-think-of-you-i-call-myself.html","url_meta":{"origin":8918,"position":1},"title":"When I think of you I call myself","author":"***Dave","date":"Mon 17-Nov-14 9:37am","format":false,"excerpt":"Okay, that's a first. I'm used to telemarketing companies spoofing Caller ID, but I've never had them spoof it with my name and phone number.Have I mentioned recently how much I hate those guys? \u00a0 View on Google+","rel":"","context":"In "~PlusPosts"","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hill-kleerup.org\/blog\/wp\/wp-content\/uploads\/2014\/11\/Simpsons-angry-mob-pitchfork-torches%5B1%5D.jpgimgmax%3D660.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":30137,"url":"https:\/\/hill-kleerup.org\/blog\/2012\/09\/07\/tweets-from-2012-09-07-6.html","url_meta":{"origin":8918,"position":2},"title":"Tweets from 2012-09-07","author":"***Dave","date":"Fri 7-Sep-12 10:45pm","format":false,"excerpt":"Seriously worth hitting up the Google homepage today, in celebration of the 46th anniversary of #StarTrek https:\/\/t.co\/peC3v5B9 # Mom confirms the only problem they've had so far at the airport is WiFi connectivity. Given the potential list, that's a blessing. # 4 of 5 stars to Sten by Allan Cole\u2026","rel":"","context":"In "~Tweets"","block_context":{"text":"~Tweets","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/tweets"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":5266,"url":"https:\/\/hill-kleerup.org\/blog\/2004\/04\/15\/my_evil_twin_st.html","url_meta":{"origin":8918,"position":3},"title":"My evil twin strikes again","author":"***Dave","date":"Thu 15-Apr-04 8:58am","format":false,"excerpt":"Based on the high volume of bounces, undeliverables, returned-because-of-viruses, etc. in my home e-mail inbox over the last week, evidently someone is spoofing my primary address. In other words, e-mail...","rel":"","context":"In "Spam"","block_context":{"text":"Spam","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/computer-security\/spam"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":137311,"url":"https:\/\/hill-kleerup.org\/blog\/2018\/10\/11\/spam-and-telemarketers-and-con-men-will-find-a-way.html","url_meta":{"origin":8918,"position":4},"title":"Spam and Telemarketers and Con Men will find a way","author":"***Dave","date":"Thu 11-Oct-18 11:08am","format":false,"excerpt":"After the FCC did a little stiffening of anti-robocall regulation last year, the folk doing this kind of thing managed to \"evolve\" to get around the regs and the minimal efforts the telcos went to in implementing them.The AGs of 35 states are urging the FCC to do more. The\u2026","rel":"","context":"In "~PlusPosts"","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":24608,"url":"https:\/\/hill-kleerup.org\/blog\/2011\/12\/17\/more-on-the-captured-us-drone-in-iran.html","url_meta":{"origin":8918,"position":5},"title":"More on the captured US drone in Iran","author":"***Dave","date":"Sat 17-Dec-11 1:55pm","format":false,"excerpt":"Some interesting bits (esp. in the comments) about spoofing GPS (which is what the Iranians claim to have done) and the (im)practicality of self-destruct mechanisms. #ddtb Embedded Link Schneier on Security: More on the Captured U.S. Drone December 16, 2011. More on the Captured US Drone. There's a report that\u2026","rel":"","context":"In "~PlusPosts"","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/8918","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/comments?post=8918"}],"version-history":[{"count":0,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/8918\/revisions"}],"wp:attachment":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/media?parent=8918"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/categories?post=8918"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/tags?post=8918"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}