Re:US breaks up IRS phone scam operation
by walrus01 on Tuesday July 24, 2018 @09:38AM
(#17600859)
If I have full control of a DID, implementing callback isn't hard. That would be a bandaid type solution built on top of the existing phone network, however. Fixing ss7 at a systemic level so that all call routing in and outbound is verifiable, CID spoofing is impossible, is what is nigh impossible.
[ Parent
| on HN ]
Re:US breaks up IRS phone scam operation
by supertrope on Tuesday July 24, 2018 @10:12AM
(#17601156)
Are there any proposed replacements? Even SIP has vulnerabilities, foot gun features, and fundamental design problems like use of MD5 digest, NAT intolerance, and vendor and device specific bugs.