<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=us-ascii" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffff99" text="#000000">
Alex Balashov wrote:
<blockquote cite="mid:4829C953.5010403@evaristesys.com" type="cite">
<pre wrap="">Steve Totaro wrote:
</pre>
<blockquote type="cite">
<pre wrap="">This make more sense:
Open WiFi AP (or cracked WEP) ----> hacked Asterisk box (who sets the
CID/ANI ----> Telco ------> terminated to the PSTN
</pre>
</blockquote>
<pre wrap=""><!---->
Well, sure, but you can do far worse things than spoof ANI/CID with that
kind of mischief. The sort of things generated in the scenario you
described are hard to track down whether they're telephony-related or not.
</pre>
</blockquote>
Precisely right, and in the general case, it seems that the essential
problem is the lack of general awareness that
certain forms of identification are unreliable. Thus the perceived
need to clear the innocent. And also, perhaps, the reason for
excessive apathy about the (general) problem in many corners.<br>
<br>
Referring back to my earlier suggestion about public key
authentication, a more widespread appreciation and understanding of
it's applicability in various realms would go a long way toward helping
solve many problems ranging from spam and phishing to stuff like this.
It's a mind-share/social problem. There is nothing inherently wrong
with spoofing; the problems arise when the receiver is unduly deceived.<br>
<br>
</body>
</html>