Wikiposts
Search
Computer/Internet Issues & Troubleshooting Anyone with questions about the terribly complex world of computers or the internet should try here. NOT FOR REPORTING ISSUES WITH PPRuNe FORUMS! Please use the subforum "PPRuNe Problems or Queries."

My phone called me

Thread Tools
 
Search this Thread
 
Old 25th Sep 2013, 01:28
  #1 (permalink)  
Thread Starter
 
Join Date: Apr 1998
Location: Mesopotamos
Posts: 5
Likes: 0
Received 0 Likes on 0 Posts
My phone called me

Yesterday I received a phone call on my smart phone that said it was coming from me.

So I answered the call and it turns out that it's from a legit business. After I explained to the caller what happened she said it occurred all the time with her calls and that she doesn't know why. I told her that her system must have been hacked and that she should get someone to look into it.

As someone who has worked in the telco space in the past and knows a thing or two about telecommunications, this is the first time I have seen this and can think of many ways of how spoofing the caller id could cause a serious incident. If the telcos and phone companies cannot prevent this exploit from occurring then it should be banned outright.

If anyone knows how spoofing the caller id works and what equipment is required I would appreciate some insight.
cattletruck is offline  
Old 25th Sep 2013, 08:52
  #2 (permalink)  
 
Join Date: May 2008
Location: England
Posts: 3
Likes: 0
Received 0 Likes on 0 Posts
That's insane! I can't give a definite answer but thinking aloud, I suspect they have a software-based phone switch (Asterisk, 3CX, FreeSwitch etc.) that's wrongly configured to present the called number as its CLIP, and the SIP gateway service they use doesn't check for valid CLIP in the SIP headers. I doubt that it's the result of a hack but yes, they need someone competent to give it a once-over.

I can't speak for anywhere else but crazily in the UK CLIP is done on an honour and best-effort basis - the network is only obliged to request that the subscriber sends correct information, they don't have to enforce it.
SergioCampari is offline  
Old 25th Sep 2013, 12:00
  #3 (permalink)  
 
Join Date: Nov 2004
Location: Perth - Western Australia
Age: 75
Posts: 1,805
Likes: 0
Received 0 Likes on 0 Posts
Cattletruck - Welcome to the world of Caller ID spoofing ..

Caller ID spoofing - Wikipedia, the free encyclopedia
onetrack is offline  
Old 26th Sep 2013, 07:08
  #4 (permalink)  
 
Join Date: Oct 2000
Location: Exeter UK
Posts: 280
Received 0 Likes on 0 Posts
Caller ID spoofing is often used by sales companies to get around situations where calls from callers who withhold their identities are blocked by the recipient's 'phone. Also to disguise the caller's real identity of course.
Very underhand!
EGTE is offline  
Old 26th Sep 2013, 18:49
  #5 (permalink)  
 
Join Date: Jun 2011
Location: UK
Posts: 44
Likes: 0
Received 0 Likes on 0 Posts
I've had three of these "own number" calls over the last couple of weeks.
On pickup it plays music for a few seconds then an Indian voice says" am I speaking to Mr .......!!!!" I can't repeat my reply!
chulmleigh is offline  
Old 27th Sep 2013, 10:10
  #6 (permalink)  
Thread Starter
 
Join Date: Apr 1998
Location: Mesopotamos
Posts: 5
Likes: 0
Received 0 Likes on 0 Posts
in the UK CLIP is done on an honour and best-effort basis
I would guess that is the case for most other places, all that is required is a poor implemention or unscrupulous person to abuse the CLIP part of an exchange system. Downstream exchanges have little choice but to assume the calling number is correct - must make a mess of the telco's billing systems.

I got a feeling we are at the thin edge of the wedge with this sort of hack and will probably see more of it.
cattletruck is offline  

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.