News for hackers. Stuff that matters.
Re:FCC will require phone carriers to authenticate calls by ... by 0xff00ffee on Tuesday March 31, 2020 @05:10PM (#22742618)
After 15 years of cell phone spam, anything that shows up as a number on my personal phone, and not a contact, is reflexively ignored. I don't think I'll ever shake this habit: if it is important, they will leave a message.
Re:FCC will require phone carriers to authenticate calls by ... by jrimbault on Tuesday March 31, 2020 @05:17PM (#22742689)
I've pushed that reflex further : if it's important, the information will find its way to me.
Re:FCC will require phone carriers to authenticate calls by ... by munk-a on Tuesday March 31, 2020 @06:49PM (#22743605)
I just wish various Doctors and Dentists could jump on the text/email bandwagon. Those two groups are responsible for nearly all of my phone usage - with a slim minority (that is itself mostly spam) being calls from my bank.
Re:FCC will require phone carriers to authenticate calls by ... by divbzero on Tuesday March 31, 2020 @07:05PM (#22743725)
Even with banks I do not trust incoming calls and always return the call using an official phone number from the bank’s HTTPS secured website.
Re:FCC will require phone carriers to authenticate calls by ... by dahart on Tuesday March 31, 2020 @07:34PM (#22744001)
> I just wish various Doctors and Dentists could jump on the text/email bandwagon.

Mine have already, and I assumed it was becoming ubiquitous already.

I'm frustrated with it because I get multiple texts, multiple emails, and multiple voice calls & voice messages for every appointment I make. I want maybe one text reminder the day before or a couple of hours before and no more, just in case I forgot to set my own reminder. But usually I do have it in my calendar reminding me anyway, just two more notifications on top of the 10 the doc/dentist sends me... :P

Re:FCC will require phone carriers to authenticate calls by ... by gumby on Tuesday March 31, 2020 @07:23PM (#22743883)
They are subject to HIPAA comstraints.
Re:FCC will require phone carriers to authenticate calls by ... by athenot on Tuesday March 31, 2020 @10:48PM (#22745113)
More precisely an over-cautious interpretation of HIPAA that happens to annoy patients and is specifically called out by HHS.

Note that an individual has the right under the Privacy Rule to request and have a covered health care provider communicate with him or her by alternative means or at alternative locations, if reasonable. See 45 C.F.R. § 164.522(b). For example, a health care provider should accommodate an individual’s request to receive appointment reminders via e-mail, rather than on a postcard, if e-mail is a reasonable, alternative means for that provider to communicate with the patient. By the same token, however, if the use of unencrypted e-mail is unacceptable to a patient who requests confidential communications, other means of communicating with the patient, such as by more secure electronic methods, or by mail or telephone, should be offered and accommodated.

Patients may initiate communications with a provider using e-mail. If this situation occurs, the health care provider can assume (unless the patient has explicitly stated otherwise) that e-mail communications are acceptable to the individual. If the provider feels the patient may not be aware of the possible risks of using unencrypted e-mail, or has concerns about potential liability, the provider can alert the patient of those risks, and let the patient decide whether to continue e-mail communications.

https://www.hhs.gov/hipaa/for-professionals/faq/570/does-hip...

Re:FCC will require phone carriers to authenticate calls by ... by ianmcgowan on Tuesday March 31, 2020 @08:01PM (#22744187)
There's something in HIPAA saying how the provider is to contact you? Over which channels? I'm sceptical. I get texts from my dentist and in-app notification from doctor.
Re:FCC will require phone carriers to authenticate calls by ... by gumby on Tuesday March 31, 2020 @08:09PM (#22744252)
You have to ensure a channel that doesn’t gratuitously leak. Email took a very long time to be accepted, especially after things like hotmail and especially gmail arrived.

This is why fax is still so common in medicine and law (in law there’s also a belief that a fax confirmation says it’s been delivered, if not read, while email is considered less reliable / more easily deniable.

Re:FCC will require phone carriers to authenticate calls by ... by grawprog on Tuesday March 31, 2020 @06:43PM (#22743554)
Yup, my voicemail box is constantly full of spam messages to the point where, my voicemail's regularly full, I couldn't be bothered to listen to any of them any more and it's too much effort to clean it out. My last carrier used to send a text if I got a voicemail. If I got a text saying I got a voicemail from someone I knew, I'd call back, if it was a random number, I'd just delete the text.
Re:FCC will require phone carriers to authenticate calls by ... by alharith on Tuesday March 31, 2020 @05:26PM (#22742795)
"Hi jimmy, this is your mother. My phone died so I am calling you from the hospital phone. Your dad is in the hospital. Come quick."

In the above scenario that happened to me, sometimes you just don't have time to let the information find you.

Re:FCC will require phone carriers to authenticate calls by ... by penagwin on Tuesday March 31, 2020 @06:12PM (#22743269)
While this is a possible scenario- in my experience most people know to call multiple times - especially if they know that the recipient won’t recognize the number.

I don’t usually answer my phone from unknown numbers, but when I get three calls from the same number within 3 minutes I’ll pick it up.

Re:FCC will require phone carriers to authenticate calls by ... by dvtrn on Tuesday March 31, 2020 @07:28PM (#22743938)
I’m not getting into ALL the details but the “repeatedly calling” back and forth between two numbers quite honestly kept me out of jail overseas due to an embarrassing miscommunication and unintended breaking of a local law (backpacking in college, drinks were had, a friend made an ass out of himself if you must know)

I called a local friend, he didn’t answer. I called his wife she didn’t either. Both follow the “don’t answer unknown numbers” rule. As do I.

It wasn’t until I called friend a second time that he answered the phone. His response? “When my wife got a call from the same number back to back is when I started thinking this must be worth my attention.”

Re:FCC will require phone carriers to authenticate calls by ... by nkurz on Tuesday March 31, 2020 @09:31PM (#22744748)
This is a nice example of port-knocking: https://wiki.archlinux.org/index.php/Port_knocking.

I wonder if it would be possible to set up something like this more rigorously. Give everyone unrelated two phone numbers. The first never rings the phone. The second only rings if the first was called within the last minute.

Re:FCC will require phone carriers to authenticate calls by ... by gibspaulding on Tuesday March 31, 2020 @10:30PM (#22745014)
Or perhaps just a pin they have to enter in order to get the first phone to actually ring. Basically 2fa for the right to bother me.
Re:FCC will require phone carriers to authenticate calls by ... by dvtrn on Tuesday March 31, 2020 @11:41PM (#22745413)
With a creative dialplan design one could do this with a private Asterisk installation (asterisk is behind so many of these cheap disposable phone number/voip providers anyway), though I suppose if one wanted to use someone else’s platform and infrastructure it’d be probably less effort with twilio or plivo
Re:FCC will require phone carriers to authenticate calls by ... by gruez on Tuesday March 31, 2020 @06:27PM (#22743410)
>While this is a possible scenario- in my experience most people know to call multiple times - especially if they know that the recipient won’t recognize the number.

I'm surprised robocallers don't do this too

Re:FCC will require phone carriers to authenticate calls by ... by jon_richards on Tuesday March 31, 2020 @06:46PM (#22743581)
Calling once selects for people more likely to fall for the actual scam.
Re:FCC will require phone carriers to authenticate calls by ... by yellowapple on Tuesday March 31, 2020 @07:00PM (#22743694)
Also, spamming/scamming in general is a numbers game. It's generally more profitable to move onto the next number on the list than to keep retrying.
Re:FCC will require phone carriers to authenticate calls by ... by gumby on Tuesday March 31, 2020 @07:24PM (#22743893)
They do
Re:FCC will require phone carriers to authenticate calls by ... by catalogia on Tuesday March 31, 2020 @05:29PM (#22742825)
That would suck, but fear of that scenario isn't enough to make me answer my phone for spammers 5 times a day.
Re:FCC will require phone carriers to authenticate calls by ... by MaxBarraclough on Tuesday March 31, 2020 @05:33PM (#22742859)
Also, I'd hope they'd have the initiative to leave both a voicemail and an SMS.
Re:FCC will require phone carriers to authenticate calls by ... by jfengel on Tuesday March 31, 2020 @05:53PM (#22743069)
Especially with a service like Google Voice that will transcribe your voicemails. I will look at those; it takes a fraction of a second to dismiss the spam.

Fortunately, I only get a few of those a week, so far.

Re:FCC will require phone carriers to authenticate calls by ... by BenjiWiebe on Tuesday March 31, 2020 @09:41PM (#22744791)
Check your spam folder. I find Google voice itself is pretty good at blocking spam calls/messages/texts.
[dead]
Re:FCC will require phone carriers to authenticate calls by ... by ChrisClark on Tuesday March 31, 2020 @06:08PM (#22743227)
Wow...
Re:FCC will require phone carriers to authenticate calls by ... by SketchySeaBeast on Tuesday March 31, 2020 @05:16PM (#22742684)
I'm struggling with the decision of whether to automatically block anyone not in my contact list and leave a message in my voicemail explaining why. Don't want to be unfriendly, but it's only getting more ridiculous.
Re:FCC will require phone carriers to authenticate calls by ... by p2t2p on Tuesday March 31, 2020 @06:51PM (#22743634)
> Don't want to be unfriendly

Given my experience with robocall and stuff, I _do_ want to be unfriendly. I hate to guts that a lot of people assume that they can interrupt you at any given moment. One guy called me when I was driving and wasn't having any of that, kept on complaining that I didn't pick up.

My current plan right now is to have a landline number from my internet provider (that's SIP essentially). Whenever anybody requires a phone number give that.

Now, there will be an voice mail device on my side with message: "Hello, you've reached p2t2p and his wife. We _DO_ _NOT_ appreciate your call. If you think your message is important, leave a message and we maybe, just maybe call you back. Otherwise, use email please".

And that is not even for bloody robocalls. Every single bloody prick think they are important enough to steal my time. Hey, I wrote you an email so respond to email, dumbass, don't call me. There were one windows installation company that stopped interacting with as soon as I told them that I won't pick up the phone and asked them to use email.

I guess the ultimate solution is to have my iPhone in permanent "contacts only" mode.

Re:FCC will require phone carriers to authenticate calls by ... by macintux on Tuesday March 31, 2020 @07:50PM (#22744113)
I’ve been paying for Vonage for 10-15 years now so I can keep my old landline phone number active to give out to businesses. Haven’t had a phone hooked up to it for nearly all that time. Voicemail + transcription works great.
Re:FCC will require phone carriers to authenticate calls by ... by koolba on Tuesday March 31, 2020 @08:57PM (#22744567)
You can get that for free with a google voice number. If you can’t port directly, the indirect method is to sign up for a PAYGO mobile phone and port your number there as an interim hop.
Re:FCC will require phone carriers to authenticate calls by ... by macintux on Tuesday March 31, 2020 @10:22PM (#22744978)
I don’t trust Google with my email. Not going to trust them with my voicemail.

(Yes, I know, a significant portion of my email ends up in their hands anyway.)

Re:FCC will require phone carriers to authenticate calls by ... by grahamburger on Tuesday March 31, 2020 @05:18PM (#22742705)
Recent versions of Android have an option to automatically screen callers who are not in your contact list. The caller gets a robot asking them why they're calling, and you can view the transcript of their response in real time and decide whether or not to answer.
Re:FCC will require phone carriers to authenticate calls by ... by SketchySeaBeast on Tuesday March 31, 2020 @05:22PM (#22742750)
I thought that was Pixel only option - I'll have to dig in and see if it's available on a Samsung.
Re:FCC will require phone carriers to authenticate calls by ... by ChuckMcM on Tuesday March 31, 2020 @05:24PM (#22742769)
As I recall this was a Google Voice feature as well.

My mobile carrier puts "scam likely" on calls that its algorithms have determined are likely spam, I wish there was an android option to just not ring the phone if that was the caller ID name.

Re:FCC will require phone carriers to authenticate calls by ... by bonestamp2 on Tuesday March 31, 2020 @05:39PM (#22742915)
My carrier was doing that but I haven't seen it on any spam calls lately.
Re:FCC will require phone carriers to authenticate calls by ... by unclebucknasty on Wednesday April 01, 2020 @01:18AM (#22745928)
I've used this feature and each time it occurs to me that the next step for spammers will likely be to simply leave the message, as they will still get an impression via the transcript.
Re:FCC will require phone carriers to authenticate calls by ... by texasbigdata on Tuesday March 31, 2020 @07:12PM (#22743789)
It's nice but buggy!
Re:FCC will require phone carriers to authenticate calls by ... by zszugyi on Tuesday March 31, 2020 @05:40PM (#22742939)
I did try it for a bit, but it was annoying when Uber drivers and delivery people were trying to reach me.
Re:FCC will require phone carriers to authenticate calls by ... by frank2 on Tuesday March 31, 2020 @08:45PM (#22744487)
Maybe we should lobby Uber to add functionality to their mobile app to eliminate the need for a legacy phone call.

Maybe after a few popular apps do that, the phone companies will start to fear losing relevance and finally take effective action against phone spam.

Re:FCC will require phone carriers to authenticate calls by ... by SketchySeaBeast on Tuesday March 31, 2020 @05:51PM (#22743051)
Yeah, that's my fear as well - I'd miss signal in the noise filtering.
Re:FCC will require phone carriers to authenticate calls by ... by alistairSH on Tuesday March 31, 2020 @05:19PM (#22742721)
I did this as soon as the iPhone offered it.

It only bit me once in several years - I was expecting a call-back from a doctor and they weren't in my contacts. Missed their call, which caused a several hour delay and some annoyance (thankfully not for something critical).

Re:FCC will require phone carriers to authenticate calls by ... by codegeek on Tuesday March 31, 2020 @07:03PM (#22743710)
Yep me too. I just don't pick ANY unknown number, period. If it is important, they will leave a voicemail.
Re:FCC will require phone carriers to authenticate calls by ... by manigandham on Tuesday March 31, 2020 @06:45PM (#22743577)
This is now a feature on both iOS and Android to mute incoming calls that are not a contact. Voicemails still work fine, and with automatic transcription and all the other digital channels still open, there's no real reason to worry about anonymous calls anymore.
Re:FCC will require phone carriers to authenticate calls by ... by evan_ on Tuesday March 31, 2020 @07:17PM (#22743826)
Yeah this worked really well for me until the county health department called from an unknown number to tell me my child had been exposed to COVID-19.
Re:FCC will require phone carriers to authenticate calls by ... by manigandham on Tuesday March 31, 2020 @07:49PM (#22744099)
Did they not leave a voicemail? Was there no transcription? How'd you end up getting the info?
Re:FCC will require phone carriers to authenticate calls by ... by evan_ on Tuesday March 31, 2020 @11:09PM (#22745239)
They called my wife, who didn’t have that set.

They actually also emailed and texted us both so in reality there was no chance of us missing that specific message...

Re:FCC will require phone carriers to authenticate calls by ... by dheera on Tuesday March 31, 2020 @07:30PM (#22743949)
I actually block all calls unless they are scheduled in advance, with the exception of SO/family
Re:FCC will require phone carriers to authenticate calls by ... by dbg31415 on Tuesday March 31, 2020 @06:41PM (#22743529)
If it’s important, they can text me. I ain’t listening to voice mail. Eww, what is this, the Middle Ages?
Re:FCC will require phone carriers to authenticate calls by ... by sinak on Tuesday March 31, 2020 @06:44PM (#22743559)
About a year ago I changed my voicemail to say "Sorry I missed your call. I don't listen to voicemails, please send me a message by SMS instead."

I couldn't recommend doing so more. Text is so much easier, even if you have voicemail transcription.

Re:FCC will require phone carriers to authenticate calls by ... by Simon_says on Wednesday April 01, 2020 @01:32AM (#22746002)
Sounds like you're in your Middle Age.