Comments for blog.limedaley.com/post/fakeable-caller-id

Comment #1964

2009-03-12T01:06:55Z

Ah, right. I forgot about that option. Thanks.

Comment #1963

2009-03-11T23:38:47Z

Caller ID information, I do not believe, is admissible in court. If your cranky lady friend calls back, tell her to press *57(costs a dollar per use), which will trace the call. If she gets more than 5 unwanted calls, she can pursue legal action. She won't have access to the traced records, but they can be used to investigate her complaint.

Comment #1962

2009-02-13T15:48:02Z

I have enjoyed having a VOIP system, with fancier routing rules. One thing you might enjoy is that the caller-id blocking function on people's phones: *XX doesn't do exactly what you think it would. It turns out that in order for the caller-id to be correctly sent to police stations, etc. the number is *always* passed along with the request, but there is an extra "privacy" header that says: "don't look at the caller-id value".

And any consumer phone provider is supposed to see that header, and strip off the caller-id value before sending the request to the end-point. However, if you are a phone system provider, then your provider won't strip it off, since you are supposed to strip it off yourself once you figure out that the call isn't to an emergency sort of person.

I haven't really found much of a use for that (yet?) but it is kind of interesting that the system works that way.

And there are some phone companies that either never send the caller-id value, or know that once the call leaves their network, it probably isn't to an emergency person, since presumably you would be calling a local emergency person, so they strip it off then, but it works in some cases.

Comment #1961

2009-02-13T15:41:51Z

Well again, IMO phones should have key based *whitelists* because getting a phone call is so disruptive to one's home.

Comment #1960

2009-02-12T21:07:06Z

One trouble with all of the phone laws is that they are US based, so non-US entities don't care a single whit about if any such laws exist. And since it is easy to get a phone system anywhere that can spoof any caller id it feels like; I don't know what the solution is.

Like most things, the biggest hurdle is education. I assume that people still trust the From field in email addresses - I don't know what it will take for people to stop believing that it is just a string of characters that usually contains correct information.

Maybe once the majority of people are using VOIP or otherwise easily configurable systems, more such blacklists would exist. But, just as an email blacklist that uses the From address is almost completely worthless, so would a system for phones that uses the caller-id field to blacklist.

Comment #1959

2009-02-12T11:19:01Z

I had that happen to me once. I didn't think that my ID could have been spoofed. I just figured the lady misdialed or something. Though perhaps the idea of misdialing is as anachronistic as the word itself; she might have done a return call. But in any case, she didn't yell at me and appeared to believe me when I said I didn't call her.

Then there's always the possibility that they're spoofing you the other direction, meaning that they're harassing you by claiming that you called them, like telemarketers who claim you have a business relationship and are thus not protected by the do not call list.

Comment #1958

2009-02-12T07:50:33Z

There was possible legislation in congress awhile ago to make caller-id spoofing illegal. Dunno whether it passed but I bet the people abusing your ID wouldn't care about breaking such a law. I further bet that you'd get in trouble for spoofing yours to avoid resulting blacklists.

Too bad people don't use keys to authenticate phone calls the way I suggest, eh? Would solve phone spam and this too.