News for hackers. Stuff that matters.
Re:FakeTraveler: Fake where your phone is located (Mock loca... by singleshot_ on Wednesday July 31, 2024 @02:23PM (#41121812)
Quick question: how come every scumbag who calls my phone with a scam has a fake caller ID, but I shouldn’t? Again, this seems pretty user-hostile.
Re:FakeTraveler: Fake where your phone is located (Mock loca... by newaccount74 on Wednesday July 31, 2024 @03:29PM (#41122574)
These scumbags shouldn't be able to have a fake ID, which is exactly what legislators in the US and the EU are currently trying to end.
Re:FakeTraveler: Fake where your phone is located (Mock loca... by singleshot_ on Wednesday July 31, 2024 @03:45PM (#41122740)
Well, if legislators are trying to fix it, I suppose I feel better about the user hostility. Good luck to the legislators, and thank god we have people like them!
Re:FakeTraveler: Fake where your phone is located (Mock loca... by newaccount74 on Wednesday July 31, 2024 @03:50PM (#41122783)
Well, legislators managed to abolish roaming fees within the EU, so maybe they'll manage to fix caller ID too.
Re:FakeTraveler: Fake where your phone is located (Mock loca... by singleshot_ on Thursday August 01, 2024 @10:07AM (#41129219)
You sound like you might be from the EU. I have some bad news for you about US legislators.
Re:FakeTraveler: Fake where your phone is located (Mock loca... by aftbit on Wednesday July 31, 2024 @05:12PM (#41123515)
For the same reason that every movie ends up ripped on piracy sites, but you still can't watch Netflix in 4k on Firefox on Linux.

DRM doesn't work because it only takes one person to bypass it to make a copy, and caller ID verification doesn't work because it only takes one janky provider that doesn't implement SHAKEN/STIR correctly and yet is worth too much money to totally block.

FWIW I can still generate calls with arbitrary caller ID from a handful of my (legacy) ITSP providers, but if I get a new account today with any of them, they will require me to either verify each caller ID by receiving an inbound call or provide a "valid business justification" for why I can't do that. They are working on tightening up the pathways to generating fake caller IDs but in the telephony world, nothing moves fast and uptime is more important than anything, except maybe revenue, of which spam calls account for a ton.