« Home HIV testing and false positives | Main | What the heck are oral fluids? »
October 14, 2005
So much for Caller-ID
It's of course well-known that Caller-ID (and its friend ANI) are untrustworthy with VoIP but I got a dramatic demonstration of that the other day. A friend called me with Skype and the number showed up as 0000123456. Nice work, Skype!Posted by ekr at October 14, 2005 9:19 AM | Filed under:
Comments
If you like that, check this out:
Posted by: Craig Hughes at October 14, 2005 12:08 PM
I experienced my first telephone phishing attack a couple of weeks ago, at work. The caller claimed to be from American Express, and left a message giving an 800 number to call to "verify some information". Of course, the number they left had nothing to do with American Express. However, the number that showed up on caller ID was American Express' customer service number in Utah. Lack of accountability strikes again....
Posted by: Dan Simon at October 14, 2005 1:11 PM
"are untrustworthy with VoIP" - dude, you got it all wrong the problem is not VoIP, the problem is that CLID is not secure in the PSTN.
Posted by: Cullen Jennings at October 23, 2005 12:55 AM
It's absolutely true that the security problem is in the PSTN. However, the rate of attack in the PSTN is fairly low, so the accuracy of CLID is semi-reasonable. OTOH, it appears that Skype routinely generates bogus CLID info....
Posted by: EKR at October 23, 2005 6:50 AM