🚀 go-pugleaf

Hosun Lee (holee@newstand.syr.edu) wrote:
: : > CALLER ID has no integrity.  The information may not be accurate and 
: : > may be sent from another location entirely.  In the past couple of days 
: : > I have had numerous 999-999-9999 for phone number on my Id.  The caller
: : > would hang up when I answered.  I finally found out that it was
: : > Nationsbank collection services looking for a boarder whom I used to
: : > rent a room too.  The individual stated that he could change the number
: : > at will and make it say whatever he wanted.  I have also had calls from
: : > "George Washington" and "John Kennedy" with the dates as their
: : > birthdays.  In conclusion:  Do not believe what you hear and only half
: : > of what you see!

: : Oh -- that's just great! We have Nations Bank here in the Washington-
: : Baltimore areas. So if I receive a phone call, and my caller ID reads
: : "999-999-9999" I can assume it's a collections agency? Then again, I
: : don't owe anyone money. But this is disturbing -- just knowing that 
: : the "incoming" caller ID information can be altered.

: Doesn't that only completely void the entire purpose of Caller ID? How do
: these companies even change their numbers like this, I'm assuming that
: Bell Atlantic offers them some sort of service for this. Yeeesh, can we
: get a service to void their service that's voiding our service?

Christ, people... "If you don't know what you're doing, deal with
people who do."

Ok, it's like this.

Any decent CNID box not specifically designed for ADSI (caller ID on
call waiting) will not accept data when the line is off-hook.  So,
spoofing after pickup is impossible.

There is _NO_ (count 'em, _no_) audio path from the source phone line
to the destination, on any switch new enough to _have_ CNID, that would
give a spoofer any way to spoof the box _during_ the ring cycle.
(Conterexamples better come with documentation cites.)

The _only_ way to spoof CNID is is you have a PBX that connectes with an
ISDN PRI, _and_ your LEC uses a CO switch that doesn't validate
outbound CNID IEs from that switch, _and_ the administrators of that
switch--usually a large company, let's face it--are willing to violate
what must at least be a tariff provision, if not a law (well, it is in
Georgia :-), by sending fals information down that line.

So, if you have a stupid LEC with bad taste in switches and judgement
in programming, yes, it is theoretically _possible_ to spoof CNID, or
if you have a cheapshit box, it is possible to _have_ your CNID
spoofed.

But let's face it, if the situation is really that important, at least
the CNDI box gives you the _switch's_ idea of the call time, so they
can look in the switch logs of the trap and trace.

Cheers,
-- jra
--
Jay R. Ashworth                                        jra@scfn.thpl.lib.fl.us
Member of the Technical Staff                    Junk Mail Will Be Billed For.
The Suncoast Freenet      *FLASH: Craig Shergold aw'better; call 800-215-1333*
Tampa Bay, Florida    http://members.aol.com/kyop/rhps.html    +1 813 790 7592