News for hackers. Stuff that matters.
Re:U.S. files lawsuits over robocall scams by dvtrn on Tuesday January 28, 2020 @08:27PM (#22176225)
How do you enforce that with how disposable DIDs are?

It is trivially easy to acquire a block of numbers from any number of sources with easily falsifiable information, connect them to a SIP application to robocall/robotext victims using easily falsifiable CID data and disappear just as trivially.

Programmatic voice via SIP trunking only makes this worse-not critiquing services like Twilio, Plivo or Telnyx, just highlighting one of the unfortunate risks the technology available to us enables.

CID enforcement is a grand idea but I have no clue how you'd actually accomplish it.

Re:U.S. files lawsuits over robocall scams by toomuchtodo on Tuesday January 28, 2020 @11:27PM (#22177441)
SHAKEN/STIR

https://www.zdnet.com/article/at-t-comcast-successfully-test...

https://transnexus.com/whitepapers/understanding-stir-shaken...

Doesn’t solve the problem entirely, but makes it easier to identify and blacklist robocall operations using heuristics, rate limiting, etc.

Re:U.S. files lawsuits over robocall scams by ianwalter on Tuesday January 28, 2020 @09:03PM (#22176456)
Passing regulation requiring audit logs sounds like a good first step.