<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content=text/html;charset=iso-8859-1>
<STYLE></STYLE>
<META content="MSHTML 6.00.2900.3314" name=GENERATOR></HEAD>
<BODY id=MailContainerBody
style="PADDING-LEFT: 10px; FONT-WEIGHT: normal; FONT-SIZE: 10pt; COLOR: #000000; BORDER-TOP-STYLE: none; PADDING-TOP: 15px; FONT-STYLE: normal; FONT-FAMILY: Verdana; BORDER-RIGHT-STYLE: none; BORDER-LEFT-STYLE: none; TEXT-DECORATION: none; BORDER-BOTTOM-STYLE: none"
leftMargin=0 topMargin=0 acc_role="text" CanvasTabStop="true"
name="Compose message area"><!--[gte IE 5]><?xml:namespace prefix="v" /><?xml:namespace prefix="o" /><![endif]-->
<DIV>
<DIV>Speaking of Law Enforcement...they are absolutely exempt from any
anti-spoof laws</DIV>
<DIV> </DIV>
<DIV>Seems both the Congress and the Senate believe there are some legitimate
law enforcement reasons for spoofing.</DIV>
<DIV> </DIV>
<DIV>----- Original Message ----- </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial"><B>From:</B> <A title=mailto:nk3569@yahoo.com
href="mailto:nk3569@yahoo.com">Nitzan Kon</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=mailto:asterisk-biz@lists.digium.com
href="mailto:asterisk-biz@lists.digium.com">Commercial and Business-Oriented
Asterisk Discussion</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, May 12, 2008 19:18</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: [asterisk-biz] ANI</DIV>
<DIV><BR></DIV>Yep. True.<BR><BR>So the issue is not needing more regulation -
but just how to be able to enforce existing regulation. Not something that
more regulation by itself will resolve!<BR><BR>Of course for all these cases,
there WILL be records allowing law enforcement officials (***who know what
they're doing***) to trace back the calls. Even if you spoof ANI/CID - your
call has to come from somewhere.<BR><BR>Let's take your 3AM campaign
suggestion for example: the way the call will go is:<BR><BR>Culprit -> VoIP
carrier who lets set CID/ANI -> ILEC or CLEC -> terminated to
PSTN.<BR><BR>Tracing it back should not be a problem if you have the proper
court orders, just find out with the terminating party which ILEC/CLEC they
got the call from, then find out with the ILEC/CLEC which VoIP carrier they
got the call from - and then finally get the customer records from the VoIP
carrier.<BR><BR>Sure, it's not as easy as it used to be, and I may be over
simplifying it - but it is possible and much better than trying to regulate
who can and can't set CID. Punish the CRIMINALS - not the
PROVIDERS.<BR><BR>--- On Thu, 5/29/08, Charles Vance <<A
title=mailto:cbvance@msn.com
href="mailto:cbvance@msn.com">cbvance@msn.com</A>> wrote:<BR><BR>> From:
Charles Vance <<A title=mailto:cbvance@msn.com
href="mailto:cbvance@msn.com">cbvance@msn.com</A>><BR>> Subject: Re:
[asterisk-biz] ANI<BR>> To: "Commercial and Business-Oriented Asterisk
Discussion" <<A title=mailto:asterisk-biz@lists.digium.com
href="mailto:asterisk-biz@lists.digium.com">asterisk-biz@lists.digium.com</A>><BR>>
Date: Thursday, May 29, 2008, 6:40 PM<BR>> each of those scenario's involve
either fraud or intent<BR>> to do harm and are already prohibited<BR>>
in FCC regs even absent the "Truth in Caller ID<BR>>
Act"<BR>> ----- Original Message ----- <BR>>
From: Steve<BR>> Totaro<<A title=mailto:stotaro@totarotechnologies.com
href="mailto:stotaro@totarotechnologies.com">mailto:stotaro@totarotechnologies.com</A>>
<BR>> To:<BR>> <A
title="mailto:trixter@0xdecafbad.com<mailto:trixter@0xdecafbad.com"
href="mailto:trixter@0xdecafbad.com<mailto:trixter@0xdecafbad.com">trixter@0xdecafbad.com<mailto:trixter@0xdecafbad.com</A>><BR>>
; Commercial and Business-Oriented Asterisk<BR>> Discussion<<A
title=mailto:asterisk-biz@lists.digium.com
href="mailto:asterisk-biz@lists.digium.com">mailto:asterisk-biz@lists.digium.com</A>>
<BR>> Sent: Monday, May 12, 2008 18:22<BR>>
Subject: Re: [asterisk-biz] ANI<BR>> <BR>> <BR>> Setting
up a drone Asterisk box to take hundreds of<BR>> thousands of
FTP<BR>> .call files at 3AM (by each time zone) and play
pro<BR>> Hillary Clinton<BR>> campaign messages (or whoever
you don't like),<BR>> obviously spoofing<BR>> her/his
campaign headquarters caller ID and ANI.<BR>> <BR>>
Obtaining a new credit card from someone's mailbox<BR>> with the sticker
to<BR>> call from your home phone to activate the card.
Spoof<BR>> their Caller ID<BR>> and ANI, activate, and buy
some cool gadgets or whatever<BR>> people do<BR>> with cards
that don't belong to them.<BR>> <BR>> Setting CallerID/ANI
to clients', girlfriends',<BR>> bosses' cell phone and<BR>>
call until voicemail picks up, if no PIN is set, I have<BR>> full
control<BR>> of their voicemail (and could possibly call out, I
will<BR>> have to test<BR>> that with the call back
option. Then someone could<BR>> really have some<BR>>
fun depending on what messages they have saved)<BR>> <BR>>
So many exploits.....<BR>> <BR>> Thanks,<BR>>
Steve Totaro<BR>> <BR>>
_______________________________________________<BR>>
--Bandwidth and Colocation Provided by<BR>> <A
title="http://www.api-digital.com<http://www.api-digital.com/"
href="http://www.api-digital.com<http://www.api-digital.com/">http://www.api-digital.com<http://www.api-digital.com/</A>>--<BR>>
<BR>> asterisk-biz mailing list<BR>> To
UNSUBSCRIBE or update options visit:<BR>> <BR>>
<A
title="http://lists.digium.com/mailman/listinfo/asterisk-biz<http://lists.digiumcom/mailman/listinfo/asterisk-biz"
href="http://lists.digium.com/mailman/listinfo/asterisk-biz<http://lists.digiumcom/mailman/listinfo/asterisk-biz">http://lists.digium.com/mailman/listinfo/asterisk-biz<http://lists.digiumcom/mailman/listinfo/asterisk-biz</A>>_______________________________________________<BR>>
--Bandwidth and Colocation Provided by<BR>> <A
title=http://www.api-digital.com/
href="http://www.api-digital.com">http://www.api-digital.com</A>--<BR>>
<BR>> asterisk-biz mailing list<BR>> To UNSUBSCRIBE or update options
visit:<BR>> <A
title=http://lists.digium.com/mailman/listinfo/asterisk-biz
href="http://lists.digium.com/mailman/listinfo/asterisk-biz">http://lists.digium.com/mailman/listinfo/asterisk-biz</A><BR><BR>_______________________________________________<BR>--Bandwidth
and Colocation Provided by <A title=http://www.api-digital.com/
href="http://www.api-digital.com">http://www.api-digital.com</A>--<BR><BR>asterisk-biz
mailing list<BR>To UNSUBSCRIBE or update options visit:<BR> <A
title=http://lists.digium.com/mailman/listinfo/asterisk-biz
href="http://lists.digium.com/mailman/listinfo/asterisk-biz">http://lists.digium.com/mailman/listinfo/asterisk-biz</A><BR></BLOCKQUOTE></DIV></BODY></HTML>