Slashdot Mirror


Telus Puts A Stop To 'Modem Hijacking'

TheIonix writes "Telus, a major telco in Canada, decided to block long distance direct-dialed calls to four countries to help reduce dial-up 'modem hijacking'. The article explains: 'When the [dial-up] user downloads [certain malware programs], the downloaded file accesses software on their computer and causes the modem to dial phone numbers in foreign countries, resulting in long distance charges.' 4 countries were targeted: Guinea-Bissau, Guyana, Nauru and Sao Tome. It is still possible to call to those countries with the operator assistance and the fees are waived. Now let's see if this nice idea will be followed by others."

293 comments

  1. When phone monopolies go corrupt... by LostCluster · · Score: 4, Informative

    Commonly, the way that these international calling scams work is that the monopoly carrier of the foriegn country charges obscenely high rates by most standards, and then the malware writer leases lines close to the point of entry so that the carrier doesn't have to do much work once the call enters their system. The malware writer is then given a piece of the international call toll for attracting the business.

    In short, the phone companies in these developing nations are usually in on the scheme and profit just as much as the malware operators do from the increased call volume. They have no interest in stopping calls that way.

    I wouldn't be opposed to giving such companies an international telecom death penality of simply not routing calls their way. If the only phone operator in a country can't properly keep scam artists out of their network, and furthermore aids such scam artists, that country really doesn't have much of a phone system to begin with... an electronic embargo might get the government there to get a clue.

    1. Re:When phone monopolies go corrupt... by Bellyflop · · Score: 5, Interesting

      A friend of mine works for a porn billing company. A lot of their customers use dialers. They don't hit the US because there are too many laws concerning it, but you'd be suprised at how many countries (like Australia) where their business is really booming. It sucks. It shouldn't be happening. But he makes a killing on it.

      To his credit, he doesn't write the dialers themselves. He just writes generalized billing systems for porn sites which are the ones putting dialers on people systems. Usually they wait until the wee-hours of the morning or during the day to make their calls so they can stay connected for a good 2-3 hours and really rack up the charges.

      I wouldn't go after the phone companies so much as I would go after the dialer producers. I think generally it's not that the phone company is in cahoots with the dialer company, it's just that they don't bother to regulate it or their government hasn't passed laws officially banning the practice. Governments usually get off their rear and do that but it takes time. Besides, there are probably legitamate reasons for calling those countries such as talking to one's family.

    2. Re:When phone monopolies go corrupt... by LostCluster · · Score: 3, Interesting

      Still, a phone company somewhere has to be offering the billing service that these dialers are using to cash in. Either it's an interational call to a phone operator that's in on the scheme, or it's the local version of 1-900 area code or 976 exchange pay services.

    3. Re:When phone monopolies go corrupt... by Bellyflop · · Score: 1

      Yes, it's true that they have to offer some sort of pay per minute phone service. I'd suspect that darn near every country's main phone service offers that though.

    4. Re:When phone monopolies go corrupt... by AKAImBatman · · Score: 2, Interesting

      If I ever found a third world country, I'll have to keep this in mind. Great way to pad the ol' treasury, eh? ;-)

      Seriously though, what would happen if you simply refused to pay the charges? i.e. Work with your phone company so that you pay them their side of the line, then simply refuse to cough up the cash to the foreign carrier. Attempts at prosecution would have to be through your home country's legal system, which may have laws regarding fraudulent debts.

    5. Re:When phone monopolies go corrupt... by Dogtanian · · Score: 3, Insightful

      To his credit, he doesn't write the dialers themselves. He just writes generalized billing systems

      Yeah. For a second there, I thought your friend sounded like an unscrupulous piece of shit, but knowing that he doesn't actually write the diallers themselves has given me new respect for him.

      What's your point exactly? This sounds like a lame excuse to absolve someone of responsibility for supporting behavior of dubious legality and even more dubious morality.

      Guess what? A good case could be made that some people might *want* to pay premium phone rates to access some good quality porn via a dialler. If other people and their backup team (your 'friend') abuse this capability, whose responsibility is that then?

      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    6. Re:When phone monopolies go corrupt... by king-manic · · Score: 2, Informative

      Seriously though, what would happen if you simply refused to pay the charges? i.e. Work with your phone company so that you pay them their side of the line, then simply refuse to cough up the cash to the foreign carrier. Attempts at prosecution would have to be through your home country's legal system, which may have laws regarding fraudulent debts.

      It's black mail. Do you really want to go to court with "Nude 17 years olds of Nigeria inc." and risk getting a rep as a porn fiend? Not that many do so this form of "blackmail" will work on most people. They'd rather pay then have others find out.

      --
      "There are more things in heaven and earth, Horatio, than are dreamt of in your philosophy."
    7. Re:When phone monopolies go corrupt... by Angostura · · Score: 1

      Do you have any actual evidence that it is the national carriers in these countries that are actively encouraging this? Yours is an interesting post, but then again, you assertion that "the malware writer leases lines close to the point of entry so that the carrier doesn't have to do much work once the call enters their system" suggests you don; have a clue how the PSTN works.

    8. Re:When phone monopolies go corrupt... by LostCluster · · Score: 1

      It's a typical follow-the-money situation. If the malware writer isn't getting a kickback from the phone company, just how else are they getting paid for doing this scheme?

    9. Re:When phone monopolies go corrupt... by akintayo · · Score: 1
      Attempts at prosecution would have to be through your home country's legal system, which may have laws regarding fraudulent debts.


      Why ?

      I believe there are treaties that govern the phone system and international interconnects. And I am pretty sure there is an arbitration system for settling disputes. And I do no think even a Canadian court would blame a foreign company because software on your computer made a call. They have no control over your computer, no control over phone and they did not make or install the software.

      --
      Woe be on to them, all who rise against poor people, shall perish in a the end. Buju Banton
    10. Re:When phone monopolies go corrupt... by ObsessiveMathsFreak · · Score: 2, Insightful

      This isn't restricted to the phone companies of the country that the dialer is calling. Eircom, the irish ISP, actually charge additional rates of up to 6 euro a minutes when one of the known dialer numbers is called!

      Still, free email addresses. Can't beat that.

      --
      May the Maths Be with you!
    11. Re:When phone monopolies go corrupt... by Ryu2 · · Score: 1

      That made me curious -- how are charges for international calls determined? For a call between country A and country B, is the price charged to the consumer the sum of country A's charges plus country B's charges?

      Do international phone calls get routed via third countries -- I imagine it must be so, right, since I can't imagine every country having connections to every other country. Would those present extra charges then?

      In general, how much is A and how much is B? Can corrupt country B unilaterally set prices depending on the originating country of the call?

      --
      There's 10 types of people in this world, those who understand binary and those who don't.
    12. Re:When phone monopolies go corrupt... by Anonymous Coward · · Score: 0

      How is not writing the dialers themselves to your friend's credit? Your friend works for a company that, as I understand it, engages in outright fraud and your friend knows it. Your friend is an asshole. Get new friends.

    13. Re:When phone monopolies go corrupt... by Best+ID+Ever! · · Score: 2, Informative

      Seriously though, what would happen if you simply refused to pay the charges?

      When this happened to my co-worker, he called the company and threatened to file an FTC complaint. They dropped the charges immediately (the company was named USBI I believe).

      The FTC is aware of the problem, and even has an FAQ on it. They encourage you to file a complaint, and also to dispute the charges with the company billing you.

      You can also tell your phone company to disallow international calls from your phone line if you don't usually make them. Cleverer dialers can use a 10-10 number, though, to get around it.

    14. Re:When phone monopolies go corrupt... by Angostura · · Score: 1

      Just because I can buy a premium rate number from a phone company and use it to collect a share of revenue (and I can) does not mean that the phone company is actively promoting auto-dialer scams.

      More likely it means the phone company has inadequate controls over the type of people who rent the premium rate numbers, or at most turn a blind eye to abuse.

    15. Re:When phone monopolies go corrupt... by jesser · · Score: 1

      How can an ISP charge you for dialing a phone number other than their own?

      --
      The shareholder is always right.
    16. Re:When phone monopolies go corrupt... by zogger · · Score: 1

      I've cleaned two of them things off of friends computers. One was this real proper older straight lady, she had gotten hacked somehow near as I can figger. I always fixed her machines and kept it updated for her, never saw any evidence of porn surfing. I told her to simply not pay the bill, to tell the phone copmpany I could provide proof of the dialer hack if they demanded it. She didn't pay and they took it off the bill pretty readily. The other one I KNOW the guy clicked on "download this teenage hottie mutant pervo crap". Luckily he asked me to take it off when he realised it was dialing a long distance number when he heard how many times it hit a number when his modem dialed out. I razzed him a good one too on that one. heh heh heh his wifes computer too, HAHAHAHAHAHA! he goes "MAN U GOTZ TO HEP ME NOW!" Oh man I was rolling, I had warned him over and over again to NOT DO THAT STUFF!

      hahahaha!

    17. Re:When phone monopolies go corrupt... by anaradad · · Score: 1

      They're not an ISP -- they're the phone company.

    18. Re:When phone monopolies go corrupt... by mnewton32 · · Score: 1

      Pooh pooh. 360c per minute to a couple of the countries involved is the highest rate there is, according to their own call calculator. As I mentioned in a previous post, this is not excessive. And if it bothers you that much, switch to Esat.

    19. Re:When phone monopolies go corrupt... by Bellyflop · · Score: 1

      My point is that these systems are also used by run of the mill porn sites where you enter your credit card and you get billed. I don't see anything particularly wrong with porn so I don't see anything wrong with supporting those sites.

  2. Now to do this for SPAM by Earl+The+Squirrel · · Score: 1, Funny

    Now to figure out a way to do something very similar for SPAM!!

    1. Re:Now to do this for SPAM by Billy+the+Mountain · · Score: 3, Funny

      Yeah, right, when you try to send out an email from Nigeria, you would have to call a transcriber and dictate the email??

      "Please type most happily in capital letters."

      --
      That was the turning point of my life--I went from negative zero to positive zero.
    2. Re:Now to do this for SPAM by Anonymous Coward · · Score: 1, Funny

      In Soviet Russia, you would have to call a dictator and transcribe the email.

    3. Re:Now to do this for SPAM by Earl+The+Squirrel · · Score: 1

      No, geeze, but finally get people to buy into the concept that mail needs to be tagged with real authentication, and let ISP's be able to shut down once and for all spammers who continue to send the same crap from different ISP's. In the same way that they're tagging Ph#'s as bad, tag senders as bad.

  3. Lesser of 2 evils I suppose by tekiegreg · · Score: 5, Insightful

    Granted auto dialers to these countries will no longer function, but I suppose the loss of the one customer who regularly dials Guinea-Bissau, Guyana, Nauru and/or Sao Tome in Canada vs. the gazillions of mad people for bum phone bills weighs itself out. However let's see them try this with a bigger country having auto dial issues as well (Thailand, Vietnam and former Russian republics come to mind). A step in the right direction, but not hardly a full solution.

    --
    ...in bed
    1. Re:Lesser of 2 evils I suppose by LostCluster · · Score: 2, Interesting

      I'd estimate that in the case of these smaller places, a majority of the phone calls they were getting from Telus were being disputed as illegitimate. Countries with larger populations would have more legit calls being made to it, and therefore it'd take many more problem calls to get to the same percentage ratio.

    2. Re:Lesser of 2 evils I suppose by afidel · · Score: 4, Insightful

      My guess is that less than 1/1,000th of one percent of their long distance traffic targets the countries in question yet these malware programs result in more than one percent of their billing complaints. My personal solution would be to do exactly what they have implemented with the additional remedy of being able to remove the call block for those customers who so request. They can already do this with 900 blocking so the ability should either exist in their software or be easily added.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    3. Re:Lesser of 2 evils I suppose by Wudbaer · · Score: 1

      Given that customers can still place calls to these countries by using operator assistence I don't think this is too much of a problem.

    4. Re:Lesser of 2 evils I suppose by belrick · · Score: 2, Insightful

      Why would it be a loss of a customer? You direct-dial like you would have in the past, but instead of being connected directly an operator confirms that you intended to make the call. You are charged direct-dial rates, not operator assisted rates.

      What could be simpler?

    5. Re:Lesser of 2 evils I suppose by Eunuchswear · · Score: 1
      So now I have to configure UUCP to call the operator at 23:30 at night? I don't think that will work.

      And yes, some people do still run services using intercontinental UUCP links.

      This better be configurable on a per subscriber basis.

      --
      Watch this Heartland Institute video
    6. Re:Lesser of 2 evils I suppose by king-manic · · Score: 3, Interesting

      Better solution:

      voice conversations are very very tolerant of small disruptions while data is not. So just introduce random noise once at the beggining (to interrupt the initial handshake) and once every minute of so. a small change in pitch and modulation 1/2 second out of a minute won't affect voice calls very much but data lines won't take it too well.

      Not that many people place Long distance data calls on land lines. Some geek BBS'ers but their pretty rare in this age of telenet. So there'd be very very little disruption of normal service.

      --
      "There are more things in heaven and earth, Horatio, than are dreamt of in your philosophy."
    7. Re:Lesser of 2 evils I suppose by Anonymous Coward · · Score: 0

      Granted auto dialers to these countries will no longer function, but I suppose the loss of the one customer who regularly dials Guinea-Bissau, Guyana, Nauru and/or Sao Tome in Canada vs. the gazillions of mad people for bum phone bills weighs itself out.

      As a side note, many people use phone cards to call those smaller countries. They get better rates that way.

    8. Re:Lesser of 2 evils I suppose by goodster · · Score: 1

      ...the loss of the one customer...

      If Telus operates in a province in Canada, it has a monopoly for the entire province. There's no loss of customers here...

      For good or for worse, we're a captive 'audience'.

    9. Re:Lesser of 2 evils I suppose by mindstrm · · Score: 1

      Not everything is black and white.. often there is no perfect reasonable solution.

      Telus is doing good here... if the complaints from the customers who want to direct-dial these countries are louder than those who are getting ripped off, telus will change things.

      This is simply being responsible, without spending a great deal of time and effort.

      Just because they chose this solution to make theri customers happier in this instance does not mean they will do the same if the problem is more widespread (in which case they might launch an investigation,, cooperate with international authorities, etc).

    10. Re:Lesser of 2 evils I suppose by Trillan · · Score: 2, Insightful

      My cell phone provider defaults to having international dialing completely disabled. You need to call and go through a verification process to enable it.

      There's a catch, though: It's either all on or all off. You can't say "I've got my wife overseas in the Philippines for a few months, and a friend in the UK. I'd like to be able to call those two countries, but please leave everyone else blocked."

      No good excuse for that, either. It's hard to believe they can't have that level of granularity. What I'd really like to do, of course, is enable only specific phone numbers.

    11. Re:Lesser of 2 evils I suppose by westendgirl · · Score: 1

      Canada opened its telecommunication system to competition several years ago. We've been able to choose long distance providers since 1992 and local services since 1997.

      --

      -- SYS 64738 --

    12. Re:Lesser of 2 evils I suppose by grolschie · · Score: 3, Interesting

      In New Zealand this problem was recently on primetime TV. In response, one of our tollcall providers has implemented a change where a confirmation message is played upon dialing a certain few countries, and the caller has to press a key in response. This is simple enough to implement and would be pretty affective. Porn-Dialers would have to be a little more clever to get around this.

    13. Re:Lesser of 2 evils I suppose by IncohereD · · Score: 1

      No good excuse for that, either. It's hard to believe they can't have that level of granularity.

      Uhhh...there's lots of good reasons for that. Either they'd have to install something physical on your phone (not likely), or else they'd have to check every outgoing call against a list of valid/invalid numbers.

      Imagine how big that database would be! And how long it would take to search. And how expensive that would be. Maybe you should just keep a better eye on your phone if you're so worried.

    14. Re:Lesser of 2 evils I suppose by Trillan · · Score: 1

      And how long it would take to search.

      A binary search on a list of, say, ten items? How long do you think that would take?

      Less time than to calculate the cost per minute, I bet.

    15. Re:Lesser of 2 evils I suppose by IncohereD · · Score: 1

      A binary search on a list of, say, ten items?

      You're forgetting storage for hundreds of thousands of potentially roaming users. Non-trivial.

    16. Re:Lesser of 2 evils I suppose by Trillan · · Score: 1

      No, I'm not actually. Most users would not have any entries. And when you roam, it all tracks back to your phone company anyway.

      How long a delay do you think it would add? One second, mostly of waiting for a response? Maybe two seconds? I'm willing to wait an extra two seconds. It already takes 30+ seconds to connect to the Philippines. 32 seconds won't kill me.

    17. Re:Lesser of 2 evils I suppose by cfuse · · Score: 1
      Not that many people place Long distance data calls on land lines. Some geek BBS'ers but their pretty rare in this age of telenet. So there'd be very very little disruption of normal service.

      Call a fax line lately? That unpleasant screeching on the line is the modem in the fax machine trying to handshake. Your proposed solution wouldn't work because whilst data is not that common anymore, fax is everywhere.

    18. Re:Lesser of 2 evils I suppose by goodster · · Score: 1

      I don't know where you're from, but it's not Alberta or BC. Long distance is deregulated, but you have the choice of Telus or... Telus.

      At least they have cheap DSL.

    19. Re:Lesser of 2 evils I suppose by FireFury03 · · Score: 1

      I sometimes have to make international data calls when things break on the internet - it'd be a major bummer to not be able to do that.

    20. Re:Lesser of 2 evils I suppose by IncohereD · · Score: 1

      How long a delay do you think it would add? One second, mostly of waiting for a response? Maybe two seconds? I'm willing to wait an extra two seconds. It already takes 30+ seconds to connect to the Philippines. 32 seconds won't kill me.

      Just think about that for a second. You're talking about a 10% increase in connect time, and therefore the connection equipment would need to be 10% more powerful, or be occupied 10% longer, which means you'd need 10% more equipment everywhere, as you can't just selectively choose where to implement this.

      It's not that it's infeasible or that expensive to do on one switch, for a few users. But the phone network is a massive, complex beast, with an absolutely unfathomable amount of equipment that would need to be upgraded. And you want this for free? Fat chance.

      Someone actually mentioned elsewhere in the discussion that their service provider was offering a 25 number whitelist for $3.95/month. That sounds reasonable. Then again, so does not using IE and not worrying about it.

    21. Re:Lesser of 2 evils I suppose by Trillan · · Score: 1

      You don't seem to understand. That extra two seconds for my connection is sleep time, nothing else. I'll grant you this becomes more complicated when roaming, but on my home network it should be possible. (My provider even said it was a common request and they were working on it when I asked.)

    22. Re:Lesser of 2 evils I suppose by IncohereD · · Score: 1

      That extra two seconds for my connection is sleep time, nothing else.

      For who, for you? For them that's an extra 2 seconds they're not getting paid for a busy line/chunk of spectrum, times N thousand customers. And that's bad business. They may be working on it, but they WILL charge you.

    23. Re:Lesser of 2 evils I suppose by Trillan · · Score: 1

      No, they won't. Because here, I can quite easily refuse a phone bill that represents a stolen cell phone. That costs them a lot more than two seconds of a thread sleeping.

    24. Re:Lesser of 2 evils I suppose by westendgirl · · Score: 1
      I live in Vancouver, BC, and studied Telus' competitive environment as part of my Executive MBA studies. Consumers can choose from Sprint, Primus, and 20 other long distance providers. Note that this link is from the Telus Yellow Pages. There are also about 12 local service providers.

      The websites for Telus and the CRTC also discuss competition in local and long distance services. Telus provides info on problems with the practices of other local and long distance providers. I first experienced "slamming" (where a telco switches your long distance provider) in 1994 while living in Ottawa, when I was supposed to have Bell long distance, but a scammy company pulled me to their plan.

      --

      -- SYS 64738 --

  4. This is good by bunburyist · · Score: 4, Insightful

    Telus needed to do something, I know from experience that this is a serious problem. 16 dollars for some call to africa i never placed, I had no idea about this stuff, fortunately Linux is immune to these things. Here's an idea: Don't hook up the phone line to the computer unless you plan on going online. That way if one of those stupid dialers fire up, its evil plan will get foiled.

    1. Re:This is good by grub · · Score: 5, Informative


      Here's an idea: Don't hook up the phone line to the computer unless you plan on going online

      Here's a better idea: download Spybot Search & Destroy and run it. Keep your system patched. Run AV software. Don't run unkown binaries (read:"crap off Kazaa")

      --
      Trolling is a art,
    2. Re:This is good by jonbryce · · Score: 2, Interesting

      There is one problem with that approach. It happens when people do plan to go online. They dial out thinking they are paying for the local rate number to their ISP (possibly at $0 per minute) and the dialer intercepts it and dials the $16/m premium rate number.

    3. Re:This is good by Anonymous Coward · · Score: 1, Insightful

      ..and pray your favorite server isn't hijacked by an unpublished IIS 'sploit, which subsequently hijacks your PC via published but unpatched IE vulnerabilities?

      I mean, I know the whole 'practice safe computing' line. I do so, myself. I won't run crap binaries, I won't visit shady websites. But sometimes this shit happens. Especially when ignorant users are placed in front of your PC.

      Then it's just a race between social engineers and ignorance, where no amount of patching can save you. Like it or not, there are unpatched holes in IE and compromised webservers make a great infection vector.

    4. Re:This is good by reallocate · · Score: 1

      >>"... Linux is immune to these things..."

      As of yet...

      --
      -- Slashdot: When Public Access TV Says "No"
    5. Re:This is good by cens0r · · Score: 1
      --
      Jack Valenti and Orrin Hatch will be first up against the wall when the revolution comes.
    6. Re:This is good by akintayo · · Score: 1

      How is me not being able to call home, because someone is too lazy to properly secure their computer considered 'good' ?

      I've never had a problem with dialers on my machines, and the only time i've encountered them are on 'free' porn sites. I would suggest you and your confederates take steps to properly secure your systems rather than blaming others.

      --
      Woe be on to them, all who rise against poor people, shall perish in a the end. Buju Banton
    7. Re:This is good by king-manic · · Score: 2, Insightful

      "Linux is immune "

      Linux is resitant. Resistant and immune are two different things. If you have a working modem in a linux box and someone out of boredom writes a C program that dials 1900-rand-prn. You'd be just as vulnerable is you left the line in.

      --
      "There are more things in heaven and earth, Horatio, than are dreamt of in your philosophy."
    8. Re:This is good by Anonymous Coward · · Score: 0

      Heres an even better idea. Get cable or DSL or something that doesn't need to dial! =)
      I remember way back in the day there was an exploit for mIRC where you can make people's modem hangup or dial whatever number you wanted.

    9. Re:This is good by cmallinson · · Score: 1
      How is me not being able to call home, because someone is too lazy to properly secure their computer considered 'good' ?

      Did you even read the post, let alone the article? You can call "home" by dialing the operator. All charges will be billed as if the call was direct dialed.

      And when you do "call home", could you please tell your family to tell their government to pass a law or two once in a while?

    10. Re:This is good by ckaminski · · Score: 1

      I have removed IE from all my personal computers (not physically, but the only way to use it is from the Explorer address bar.

      No, what really pisses me off is when people sit down and use my running copy of Mozilla (which has another shortcut called Internet Exlorer++ which fakes out most people, even has the circular blue E) they end up closing all my existing tabs.

      I have to specifically warn them NOT to close my browser... weirdos. Good thing I'm getting a public kiosk computer for the dozens of people who come roaming through my house on a weekly basis.

    11. Re:This is good by MalikChen · · Score: 1

      Here's an idea: Don't hook up the phone line to the computer unless you plan on going online

      Here's a better idea: download Spybot Search & Destroy and run it. Keep your system patched. Run AV software. Don't run unkown binaries (read:"crap off Kazaa")


      Here's an EVEN better idea: run linux.

    12. Re:This is good by Demonspawn · · Score: 1

      +++
      ATH
      ATZ
      ATDT 18009689474

      --Demonspawn

    13. Re:This is good by Webmoth · · Score: 1

      Here's an EVEN better idea: run linux.

      Here's an EVEN BETTER even better idea.

      --
      Give me my freedom, and I'll take care of my own security, thank you.
    14. Re:This is good by whmac33 · · Score: 1

      Why would a dozen people use your PC a week? Do you just have a lot of friends or what?

    15. Re:This is good by Ironica · · Score: 1

      I mean, I know the whole 'practice safe computing' line. I do so, myself. I won't run crap binaries, I won't visit shady websites.
      ...
      Like it or not, there are unpatched holes in IE and compromised webservers make a great infection vector.


      Part of practicing safe computing is configuring IE so that it won't do anything at any site you haven't specifically allowed (like windowsupdate.com or housecall.trendmicro.com). If you browse the web with IE, you are just not practicing safe computing. Sad but true.

      --
      Don't you wish your girlfriend was a geek like me?
    16. Re:This is good by Ironica · · Score: 1

      If you have a working modem in a linux box and someone out of boredom writes a C program that dials 1900-rand-prn. You'd be just as vulnerable is you left the line in.

      You forgot the step where they get the program onto your computer...

      --
      Don't you wish your girlfriend was a geek like me?
    17. Re:This is good by robertjw · · Score: 1

      Here's a BETTER idea. Run a secure OS - download Slackware

    18. Re:This is good by akintayo · · Score: 1

      And what law would that be ?

      The law preventing foreign computer users from surfing porn sites. Or the law prevent foreign computer users from installing programs that dial their modems. Or maybe a law prohibiting foreigners from dialing Guyana. Or maybe a law requiring the telephone company to block all data traffic. After all, we wouldn't want you people to use common sense and not install malware. No it is better that someone else be responsible for your actions.

      I read the entire article, and I noted that it accused us of being the originators of this 'scam'. It also claims that the software is downloaded unknowingly. The 'auto dialers' that I know of claim to provide free porn, if they do not do this that is an issue that is between the merchant and his client, and has nothing to do with us. We provide a legal resource to our customers, a phone line, and we are paid for the usage of that phone line. Some 'auto dialers' claim that the cost of a phone call is included, in which case this is entirely the fault of the 'end user'. Most browsers give the user some control over what software is installed on their computer, so the second claim shows some degree of negligence on the 'end users' part. And in any case this is an issue between the user, the producer of the malware and the law enforment agencies within their jurisdictions. This is not an issue for our courts. We don't have the will or ability to prevent foreign citizens from writing malware.

      And having to call an operator to make an overseas call is a serious problem. It assumes the lack of a language barrier and competent operators.

      --
      Woe be on to them, all who rise against poor people, shall perish in a the end. Buju Banton
    19. Re:This is good by FLEB · · Score: 1

      Oh, sure... that's a great idea... UNTIL SOMEBODY POKES OUT AN EYE!!!

      Dear Lameness Filter,
      Yes, I meant to yell.
      Sincerely,
      fleb.

      --
      Information wants to be free.
      Entertainment wants to be paid.
      You just want to be cheap.
    20. Re:This is good by king-manic · · Score: 1

      You forgot the step where they get the program onto your computer...

      Lets see, they attach it to cron on a shared server. They label it sdl 44.1.5.1 and bundle it with a game. they figure out your root password is "iluvlinus" and place it there.

      Linux is more secure, but not immune. Your only as secure as your dumbest user. Given a dumb enough user, even linux can be fucked.

      --
      "There are more things in heaven and earth, Horatio, than are dreamt of in your philosophy."
    21. Re:This is good by Todd+Knarr · · Score: 1

      Actually my Linux box is immune to this. The outbound modem devices are set writable only by root. The programs that would access them are either suid-root and have their configurations alterable only by root, or are behind a wrapper that demands the root password before it'll run the programs with appropriate privileges to access the device. A dialer program, even if it got itself installed on my system, would be stuck getting "permission denied" errors until it finally gave up.

    22. Re:This is good by king-manic · · Score: 1

      lol. Still not immune. Immune means under no circumstances will you ever dial out. Resistant means it's hard to near impossible to dial out. thus even you are nto Immune, merely resistant. Now you coudl be immune if you unplugged the modem. They could still get you is they knew yoru root password. Unlikly but still not immune. I on the other hand am immune despite suing IE here at work because I have the modem un-plugged.

      --
      "There are more things in heaven and earth, Horatio, than are dreamt of in your philosophy."
    23. Re:This is good by Anonymous Coward · · Score: 0

      Here's a BETTER idea, get a medium kinky girlfriend. Much mo fun, well, IMO anyway.

    24. Re:This is good by plam · · Score: 1

      My linux laptop is immune because I haven't bothered to set up the softmodem drivers yet. I'd be impressed if some malware managed to set up my modem drivers for me!

    25. Re:This is good by cmallinson · · Score: 1

      And what law would that be ? If laws are not the issue, then why is this not happening with countries like France, or Australia?

    26. Re:This is good by akintayo · · Score: 1

      I don't know.

      There are quite a few probabilities; it would be cheaper to rent a line in Guyana, than in those other countries. there is also a question of capabilities, these 'scams' generally use telex/teletext lines, which is an almost obsolete technology. there is also the signal to noise ratio, since there are more French and Australians in Canada the number of fraudulent calls is less obvious.

      --
      Woe be on to them, all who rise against poor people, shall perish in a the end. Buju Banton
    27. Re:This is good by yuri+benjamin · · Score: 1

      Here's an idea: Don't hook up the phone line to the computer unless you plan on going online.

      Do any of these dialer dealers write dialers for linux? I'm sure it's possible, but do they? And is there any way under linux to install these things without the user's permission? Or do they take advantage of some remote exploit or do browsers under windows automatically run .exe files? Do any browsers under linux automatically install .rpm files? Could someone please post a snippet of code as proof-of-concept?

      --
      You make the mistake of thinking you can educate the fundamental stupidity out of people. You can't.
    28. Re:This is good by Gordonjcp · · Score: 1

      Yeah man, I'd *welcome* the malware that got my laptop's winmodem to work.

    29. Re:This is good by meringuoid · · Score: 1
      I know the whole 'practice safe computing' line. I do so, myself.

      Like it or not, there are unpatched holes in IE

      You practice safe computing... and you use IE.

      Someone mod this one +5 Funny.

      --
      Real Daleks don't climb stairs - they level the building.
    30. Re:This is good by ckaminski · · Score: 1

      I live in a frathouse for 30year old college dropouts. The computer is right next to the keg fridge. I think that's all I need to say about that. :-)

  5. Incredibly obscure Simpsons reference... by Anonymous Coward · · Score: 0

    What about calls to "disputed zone", maybe malware writers really want to find out which way the toilet water goes when it's flushed.

    1. Re:Incredibly obscure Simpsons reference... by Sexy+Bern · · Score: 1

      Down.

    2. Re:Incredibly obscure Simpsons reference... by proverbialcow · · Score: 1

      I knew I shouldn't have written that check, but the promise of endorphins was just too tempting to resist.

      --
      The only surefire protection against Microsoft infections is abstinence. - The Onion
  6. Another idea by drinkypoo · · Score: 5, Interesting

    Why not just have a system that speaks some digits and waits for you to punch them back in for verification? I doubt this software is going to figure out the drivers for your voice modem and do speech recognition.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    1. Re:Another idea by marnargulus · · Score: 2, Insightful

      Because that would be a huge hassel to implement compared to the 1 operator it will take to handle these calls to countries most people don't know exist. When was the last time you called Sao Tome(of your own will)?

    2. Re:Another idea by Bellyflop · · Score: 1

      They'll write the code if it's economical to do so. Given how many people these companies employ and how much money they are making, I have a feeling that they will write the code...

    3. Re:Another idea by Anonymous Coward · · Score: 0

      A problem with this is if you actually wanted the computer to dial out. For example maybe you won a lottery there or someone needs to transfer millions of dollars out of the country and you need to fax your banking info.

    4. Re:Another idea by skipscum · · Score: 2, Insightful

      Or ...have all calls routed to the operator by default. If you are a regular caller to these countries, then ask the operator to set a flag on the telcos database, so that from then on, you can dial direct.
      Most people would only be dialing these countries if their box had been hijacked. People who regularly need to call these countries direct would be able to opt to have the convenience of direct dialing at their own risk.

    5. Re:Another idea by drinkypoo · · Score: 1

      Actually, it ought to be easier to implement. Just run it into a voice mail system that can place outgoing calls. Ding! You're done, with no more effort than setting up a new voice menu.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  7. Nice Idea? by goldspider · · Score: 0, Troll
    "Now let's see if this nice idea will be followed by others."

    Nice? I thought that any act by government restricting our freedom, no matter how benevolent their intent, was a bad thing.

    How bout they focus on educating the public about malware instead?

    --
    "Ask not what your country can do for you." --John F. Kennedy
    1. Re:Nice Idea? by TwistedSquare · · Score: 1
      I thought that any act by government restricting our freedom, no matter how benevolent their intent, was a bad thing.

      Your statement is too broad. Locking up criminals restricts their freedom but is a good thing. Making us pay taxes restricts our freedom to do what we like with our money, but is a good thing. In this particular case it doesn't seem to me to actually be the government doing this anyway.

    2. Re:Nice Idea? by Joe+the+Lesser · · Score: 1

      Wouldn't it be the corporations restricting freedom in this case?

      --
      "I only speak the truth"
      Karma: null(Mostly affected by an unassigned variable)
    3. Re:Nice Idea? by Anonymous Coward · · Score: 0

      Way ahead of ya, but thanks!

    4. Re:Nice Idea? by tsg · · Score: 3, Interesting

      How bout they focus on educating the public about malware instead?

      It seems to me a dialog box generated by the OS when an application tries to access the serial port would go a long way towards preventing this. I mean, doesn't this whole scam rely on the modem dialing out without the user knowing?

      --
      People's desire to believe they are right is much stronger than their desire to be right.
    5. Re:Nice Idea? by goldspider · · Score: 2, Insightful
      "Making us pay taxes restricts our freedom to do what we like with our money, but is a good thing."

      Risking a plunge from the Offtopic cliff, I wouldn't call paying taxes a good thing. It's more like a necessary evil that is abused by government at every chance.

      "In this particular case it doesn't seem to me to actually be the government doing this anyway."

      Indeed, I posted the correction as AC.

      --
      "Ask not what your country can do for you." --John F. Kennedy
    6. Re:Nice Idea? by lightspawn · · Score: 4, Insightful

      I thought that any act by government restricting our freedom, no matter how benevolent their intent, was a bad thing.

      Telus is a telco, not the government.

      How bout they focus on educating the public about malware instead?

      Have you ever tried educating the public about anything?

      Remember last week, when CERT recommended MSIE users consider switching browsers, and MSIE usage fell to under 10%? It didn't happen quite that way, now did it?

      Remember, this is the same public that buys RIAA music, believes they'll go to hell if they "sin", and trust voting machines because they're convenient.

    7. Re:Nice Idea? by Anonymous Coward · · Score: 4, Informative

      1) Telus is a publicly traded company, not a government agency

      2) This does not restrict your freedom in any way. You can still call Nauru etc, just not without opeator assistance.

    8. Re:Nice Idea? by Anonymous Coward · · Score: 0

      the program would just simulate a click then, it's trivial. your solution is wrong.

    9. Re:Nice Idea? by Anonymous Coward · · Score: 0

      Thankfully Telus is not the government in bc or alberta, or both provinces would be more screwed than they already are.

      Telus is just a crappy telco in western Canada, and a national wireless provider by virtue of buying out a national wireless provider (Clearnet)

      I can't wait for Bell to squish them like the bugs they are.

    10. Re:Nice Idea? by LostCluster · · Score: 1, Informative

      Telus isn't a government, it's just the monopoly phone provider in the western sections of Canada...

    11. Re:Nice Idea? by XMyth · · Score: 1

      What freedom is being restricted? Calls can still be made to those countries, so what exactly is the problem?

    12. Re:Nice Idea? by TwistedSquare · · Score: 1
      I wouldn't call paying taxes a good thing.

      I think we'll leave it at a difference of opinion ;) I hadn't seen your AC correction, now I have.

    13. Re:Nice Idea? by Zebbers · · Score: 1

      wow i didnt know telus was actually the canadian government... geez
      the things you learn on here...

      and they will still provide a way for you to call...no harm done.

    14. Re:Nice Idea? by chris_mahan · · Score: 1

      >How bout they focus on educating the public about malware instead?

      Educating the public never works. It's like giving money to the poor. They will take it, mutter a "it's about time" and keep on doing whatever they were doing.

      Fear is a much better motivator.

      --

      "Piter, too, is dead."

    15. Re:Nice Idea? by mumblestheclown · · Score: 1
      sorry to hear that you were marked as a troll.

      it is common practice on slashdot to mark somebody a troll that points out the obvious and regular hypocricies of the slashdot crowd. see my feedback - it regularly alternates between -1 troll and +5 whatever.

    16. Re:Nice Idea? by GISGEOLOGYGEEK · · Score: 1

      You have the PRIVILEDGE of calling other countries through the private company Telus (non-government)

      You dont have the RIGHT to call anywhere.

      The government isn't restricting anything.

      And this action was the result of a dumbass fool surfing porn sites who let a dialer get installed on his computer, then would'nt take responsibility for the results.

      He kept paying his regular phone bill, but not the $3000 the dialer wracked up.

      Sure he was attacked (through his own stupidity), but he is responsibile for how his phone is used. I think Telus should deny him any phone service in the future.

      --
      George Bush + Linux = "I will not let information get in the way of the fight against Windows"
    17. Re:Nice Idea? by Ironica · · Score: 1

      It seems to me a dialog box generated by the OS when an application tries to access the serial port would go a long way towards preventing this.

      Let's see...

      "The OS" is Windows. So they'd only put this in new versions, and you'd have to upgrade to get it. Then they'd have it disabled by default to begin with, since it could confuse people. Then in a service pack, they'd do a security rewrite, and have it enabled by default. But people would find it annoying that they have to click every time they go online, so they'd disable it anyway.

      So, no, it wouldn't go a very long way towards preventing this. Also, it probably would be fairly easy to circumvent in software. You'd need a hardware solution, and that would be even *more* cumbersome for people to deal with, so they'd be even less likely to use it.

      --
      Don't you wish your girlfriend was a geek like me?
    18. Re:Nice Idea? by Anonymous Coward · · Score: 0

      I lived in both Ontario and BC, and I can tell you right now, without a doubt, that Bell sucks more than Telus.

    19. Re:Nice Idea? by Anonymous Coward · · Score: 0

      i too lived in ontario and now in bc, and sorry, bell's customer service and quality is head and shoulders above telus. i had dsl with them, 4 mb, at $65 a month. they decided to reduce me to 2.5 mb, but keep me at the same price. i asked why the change, i was told because no one gets 4 mb. i actually was getting between 3.6 and 3.9. then i had my dsl go out. i called for 6 days straight asking when they would fix it. by saturday, i was told that they would rather have the problem go unfixed, and refund me a month's access, than send a tech out on saturday overtime. when i finally decided to dump dsl for cable, i called to cancel and found both my dsl and my land line almost instantly disconnected. after that, i went to bell, got a cel package, and now live in a telus free world. telus can suck my nuts.

      the stats from the crtc prove how bad telus is. telus has 1/3 the user base of bell, and had 10X the complaints. and thats not per capita. bell had something like 230 complaints, while telus had over 2300.

    20. Re:Nice Idea? by tsg · · Score: 1

      "The OS" is Windows. So they'd only put this in new versions, and you'd have to upgrade to get it. Then they'd have it disabled by default to begin with, since it could confuse people. Then in a service pack, they'd do a security rewrite, and have it enabled by default.

      Well, if you implement my suggestion in the worst way possible, of course it will fail. My comment was not meant to be technically complete. But if you want to get into it, the access to the comm port would have to be controlled on the driver level allowing the user to give applications permission to use the device. It need not ask every time access to the port is requested. Access could be set up beforehand or on the fly and the question need only be answered once for every application. You could even have options for "Always", "Just this time", "Not this time" and "Never". Of course all this relies on not allowing just anyone to overwrite the drivers (which, arguably, should have been part of the OS in the first place).

      But people would find it annoying that they have to click every time they go online, so they'd disable it anyway.

      If they disable it, then it's their own fault if they get a large phone bill, but at least they'd have the option, unlike now.

      You'd need a hardware solution,

      Providing access to the hardware is what the operating system is for. That's its job. Controlling what applications have access to the hardware is ideally suited for the operating system.

      --
      People's desire to believe they are right is much stronger than their desire to be right.
    21. Re:Nice Idea? by Ironica · · Score: 1

      Well, if you implement my suggestion in the worst way possible, of course it will fail.

      That was my point. The OS that we're talking about is Windows. It's made by Microsoft. You have to take into account how you can reasonably expect them to implement something new, when suggesting an OS-based solution. My description is based on how they have previously implemented security measures designed to keep certain attacks from happening (like Word Macro Viruses for example).

      --
      Don't you wish your girlfriend was a geek like me?
    22. Re:Nice Idea? by tsg · · Score: 1

      That was my point. The OS that we're talking about is Windows. It's made by Microsoft.

      That was kind of my point in my original comment: the telco blocking calls to certain countries to prevent this kind of fraud is a hack to make up for the lack of proper controls in the operating system.

      --
      People's desire to believe they are right is much stronger than their desire to be right.
  8. Countries exists ? by Anonymous Coward · · Score: 0, Funny

    > Guinea-Bissau, Guyana, Nauru and Sao Tome.

    Do these countries really exists ? Never ever heard of them.

    1. Re:Countries exists ? by MoonBuggy · · Score: 1

      I know someone from Guyana, which makes me feel even dumber for never having heard of the other 3.

    2. Re:Countries exists ? by raehl · · Score: 2, Funny

      (three ascending tones) Message 5972 - The country you are trying to reach has been disconnected.

    3. Re:Countries exists ? by Fearless+Freep · · Score: 1

      Is Ranma the capital of Sao Tome? Or Maybe Genma?

    4. Re:Countries exists ? by teeloo2 · · Score: 1

      Yes - country do exists outside of the USA.

    5. Re:Countries exists ? by sindarin2001 · · Score: 1

      I was thinking the same thing. Nice one!!

    6. Re:Countries exists ? by Alsee · · Score: 1

      (three ascending tones) Message 0666 - The country you are trying to reach is now a smoldering crater. There will be no fowarding number. Do not bother trying your call again later.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    7. Re:Countries exists ? by Anonymous Coward · · Score: 0

      Yes, we know.
      Our tax money feeds and protects the majority of the world. It would be nice if Europe or Russia or China or Canada would start picking up the tab so those billions can start go into our schools.

    8. Re:Countries exists ? by Anonymous Coward · · Score: 0

      >> Yes, we know.
      >> Our tax money feeds and protects the majority of >> the world. It would be nice if Europe or Russia >> or China or Canada would start picking up the tab >> so those billions can start go into our schools.

      Umm. Fsck me with a desert spoon if that's not the stoopidest troll ever... I just KNOW there aren't any merikuns as stoopid as this guy.

      Must be a troll from Nauru

  9. Phew by grub · · Score: 5, Funny


    I'm glad Nigeria isn't being blocked, I have to contact Dr. Mbugo Mbongo to see how my wire transfer went.

    --
    Trolling is a art,
    1. Re:Phew by Anonymous Coward · · Score: 0

      Dr. Mbugo Mbongo

      We know you are lying. The man by that name doesn't live in Nigeria. There are too many vowels in that name.

    2. Re:Phew by TheLetterPsy · · Score: 1

      I guess I don't understand Mod points very well. This is probably one of THE funniest posts I've read in the last week, and it only gets scored a 3 for funniness? I've seen some really lame stuff get 4s, and even 5s. Good thing I have my threshold set so low, or else I would've missed this gem.

    3. Re:Phew by Anonymous Coward · · Score: 0

      Geeze you are impatient. They post is modded to 3 when there are only 40 posts or so total. Gaurantee it'll be 5 before the number of posts hits 100.

    4. Re:Phew by Anonymous Coward · · Score: 0

      Guess I was wrong. It was modded up to 5 before the total post count hit 50.

    5. Re:Phew by Barumpus · · Score: 1

      On behalf of Dr. Mbugo Mbongo and my late aunt Echsheluba Malabuatta, I want to say thank you. With out your wire transfer, we would not have been able to get her $73 million US estate transferred where we could put the money to good use helping the poor, undernourished children of the world.

      Now if we could only get they mud-walled, thatch-roofed shack she owned sold, we would have all of those hungry children fed.

    6. Re:Phew by Raven42rac · · Score: 1

      You should have posted as "anonymous mugu".

      --
      I hate sigs.
  10. scam by alecks · · Score: 0

    900 number operators could use this method to scam people for money...

  11. A good start by Joe+the+Lesser · · Score: 1

    If not a bit late, though seems like the wrong approach to the problem, but perhaps as much as the phone company can do about it.

    Of course, I personally haven't seen a modem in years... ;-)

    --
    "I only speak the truth"
    Karma: null(Mostly affected by an unassigned variable)
  12. Not really "putting a stop to it", are they? by lightspawn · · Score: 2, Insightful

    It only affects their customers, and only with malware dialing to four specific countries.

    With that kind of sensationalist headline, you'd think they released a benevolent worm that safeguards against hijacking.

    Seriously, is following the money, reversing the charges and putting the people responsible behind bars all that difficult?

    1. Re:Not really "putting a stop to it", are they? by GigsVT · · Score: 3, Interesting

      Yes, because the people responsible are the people running the foreign governments and phone companies.

      It's not like it's some rogue criminal, you'd have to basically invade the country and overthrow the corrupt government if you wanted to stop them.

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
    2. Re:Not really "putting a stop to it", are they? by lightspawn · · Score: 2, Funny

      you'd have to basically invade the country and overthrow the corrupt government if you wanted to stop them.

      Well, that's certainly a nobler purpose than the last time the U.S. invaded a country. Given a choice, I'd go with that.

    3. Re:Not really "putting a stop to it", are they? by e9th · · Score: 4, Funny

      I can see the headline now: "Canada Invades Sao Tome, or will just as soon as they can locate it."

    4. Re:Not really "putting a stop to it", are they? by FireBreathingDog · · Score: 1
      Well, that's certainly a nobler purpose than the last time the U.S. invaded a country. Given a choice, I'd go with that.

      That's right, because Saddam Hussein was such a nice man!

    5. Re:Not really "putting a stop to it", are they? by thomasdelbert · · Score: 2, Funny


      There's more than just locating it - we have to get our tank out of Afghanistan. Our airplane is tied up too.

      - Thomas;

      --
      ___ This sig is in boldface to emphasize its importance!
  13. Operator Assisted Modems by Bastian227 · · Score: 5, Funny
    It is still possible to call to those countries with the operator assistance.

    Operator: How may I direct your call?
    Customer: Squeeechhllcshhsh
    Operator: You want to be connected to Guinea-Bissau?
    Customer: Squeeeeelch
    Operator: One moment while I connect you.

    See, it won't help. :)

    1. Re:Operator Assisted Modems by LincolnQ · · Score: 1

      Heh, Telus. Indeed. If I remember correctly, at h2k2 in new york two years ago, the speaker at the Caller ID Spoofing panel called a Telus operator. He was like "Hi, I'm a Telus technician calling from . Can you please place a test call to ?" and the operator would be like "Sure"

    2. Re:Operator Assisted Modems by LincolnQ · · Score: 2, Interesting

      Damn preview. The quote I meant was:

      "Hi, I'm a Telus technician calling from [insert any number here]. Can you please place a test call to [wherever]?"

      (see, cuz I used angle brackets instead of square, and didn't escape them...)

    3. Re:Operator Assisted Modems by Kenshin · · Score: 4, Funny

      Well, god knows the operator doesn't wanna piss off a dolphin. They have good lawyers, I hear.

      --

      Does it make you happy you're so strange?

  14. Re:Nice Idea? Slight Correction by Anonymous Coward · · Score: 0

    I understand that this is a telco company doing this, not government, but my point is still the same. Restrictions should be a last resort.

  15. Pay us to not provide a service to you? by LostCluster · · Score: 2, Informative

    Telus's CallGate service costs $3.95 (Canadian, of course) and gives the option configure it to block 1-900 calls, toll calls, a list of 25 specific numbers or such.

    It's interesting that they're asking people to pay to be not able to dial given numbers. You'd think a hardware device on the user's side could provide the same functionality for less...

    1. Re:Pay us to not provide a service to you? by Tackhead · · Score: 4, Interesting
      > It's interesting that they're asking people to pay to be not able to dial given numbers. You'd think a hardware device on the user's side could provide the same functionality for less...

      Problem with (commercially) building something designed to plug into the phone jack is that there's a lot of paperwork involved.

      Such a device would be a very cool homebrew project, though. Just intercept the DTMF for "1" and a user-configurable series of digits (you could program the device either with a keypad on the device, or you could program the device with DTMF tones). Hold the dialed digits in a buffer. When the user finishes dialing the digits on the phone, the user presses the "dialout" button on the phoneblocker, and the buffered digits are dialed out. (Sorta like a cell phone - punch in digits, then click "OK" to dial)

      Because a trojan dialer isn't going to have you around to press "dialout", no call ever gets made. Added bonus, you have a gadget that can log the numbers (and for real style points, add a clock chip and store time and date :) all outbound calls made from your number.

      Of course, anyone smart enough to design it - or even just build it from a set of schematics and a bucket of spare parts - is unlikely to get pwn3d by a trojan pr0n dialer in the first place. But it'd be a fun weekend project or group exercise for a first year engineering course.

    2. Re:Pay us to not provide a service to you? by Murf_E · · Score: 2

      You'd think a hardware device on the user's side could provide the same functionality for less..
      its called unplugging the phone cord
      the software solution is called ad-aware/spybot S&D

      --
      this sig intentionally left blank
    3. Re:Pay us to not provide a service to you? by greed · · Score: 1
      Such a device would be a very cool homebrew project, though. Just intercept the DTMF for "1" and a user-configurable series of digits (you could program the device either with a keypad on the device, or you could program the device with DTMF tones).

      They don't sell those at Radio Shack any more? Hmmm, looks like they're end-of-life, "Long Distance Toll Call Restrictor". The web description is fairly vague, it might not be very programmable. But if it's any good at all (keep in mind, Radio Shack...), blocking international calls would be separate from North American ones.

    4. Re:Pay us to not provide a service to you? by lish2 · · Score: 1

      When I was in college (in the US, granted) we had a service where when you dialed long distance, it asked you to enter a 3-digit access code. Then they would automatically split up our long-distance bill among the roommates (each picks their own code) and it kept random party guests from making a long distance/900 call without someone's permission. I think it was a couple bucks a month, but might have been free with some package of callerID, call waiting, etc. It was worth it not to have to argue over who made what call that month.

      That sort of service could also prevent this autodialer problem. Heck, from the phone co's POV, if Joe Schmoe calls up and claims he didn't make some call, you could prove that he did ("But sir, you entered your access code."), reducing billing chargebacks.

      It would also keep your kids from accidentally dialing China while playing "Mary had a little lamb" on the dialpad. :-)

    5. Re:Pay us to not provide a service to you? by jesser · · Score: 1

      Of course, anyone smart enough to design it - or even just build it from a set of schematics and a bucket of spare parts - is unlikely to get pwn3d by a trojan pr0n dialer in the first place. But it'd be a fun weekend project or group exercise for a first year engineering course.

      Anyone smart enough to design it would probably have broadband rather than dial-up, too.

      --
      The shareholder is always right.
  16. Why not? by Anonymous Coward · · Score: 1, Interesting

    Just make people dial a PIN number in front of the number, instead of going through the operator? Thus most people will never care they can't call those countries and the ones that do can still do so without the operator (faxing must be a PITA!)

    Or make people use calling cards for those countries?

    1. Re:Why not? by TubeSteak · · Score: 1

      Yea, mail them a pin code and guess what the first thing they'll do is? Yep, put it as autodial button #1. Most ISP dialers ask if you have to dial anything to get an outside line & it doesn't seem like much of a leap for the dialers to just yank that information and use it themselves. Its always a balance between security and convience. most people want convience.

      --
      [Fuck Beta]
      o0t!
  17. so the malware writers will just... by Anonymous Coward · · Score: 3, Insightful

    make the programs dial different countries. simple.

    then the telcos will block those countries...
    until we need operator assistance to dial anything!
    (extreme)

    1. Re:so the malware writers will just... by gl4ss · · Score: 1

      well.. there are not that many telcoms in the world that are willing to keep such customers that generate revenue through those dialers, basically you have to be in bed with the telecom somehow(through bribery most probably in most cases).

      --
      world was created 5 seconds before this post as it is.
    2. Re:so the malware writers will just... by dk.r*nger · · Score: 1

      It's really not that simple. The way these people make money, it by providing telephone service to certain numbers in a remote.

      A few years back, in Denmark, there was a big deal around calls to St. Helena. The provider for these islands is British Telecom, so these were routed through London, and ran at about 20 dkr/min (=$3-4). About 1 or 2 dkr was the cost of the call to britain, and thus shared by the danish and british (legit) telcos. The rest of the money were paid to the malware-people to whom BT apparently had outsourced the connection to these numbers in St. Helena - except they didn't go there. The call gave you a normal PPP connection to a London ISP.

  18. in sweden.... by Anonymous Coward · · Score: 2, Informative

    telia, the major telecom company here have created software (free to download from their site) for ms windows that blocks mode hijacking attempts.

    1. Re:in sweden.... by Patrik_AKA_RedX · · Score: 2, Funny

      Who would have known that format.com was swedish...

    2. Re:in sweden.... by Anonymous Coward · · Score: 1, Funny

      In fact you can download that software for free off my website in Guinea-Bissau.

    3. Re:in sweden.... by argent · · Score: 1

      I have software that blocks modem hijacking attempts and just about any other malware.

      Mozilla Firefox.

      Any other non-IE-based browser (on Windows) or IE running on a non-Windows platform (like MacOS or Solaris) will work as well. It's the IE-Desktop link that most malware uses to attack.

  19. How many people still use modems? by Paul+Slocum · · Score: 3, Insightful

    Seems like this problem may soon be eliminated by obsolescence.

    1. Re:How many people still use modems? by Anonymous Coward · · Score: 0

      i just canceled broadband cable because i do not feel like paying 40 bucks a month for an internet subscription that is only used 1 or 2 hours a day, when i can pay 15 bucks a month for dialup...

      the only thing i miss is downloading Linux ISOs at those higher speeds. websurfing & email is only slightly slower

      looks like my next distro will be delived by UPS

    2. Re:How many people still use modems? by zaren · · Score: 1

      40-50% of the Internet users in the United States still use dialup. That's TENS OF MILLIONS [/pinky] of users, many of which will NEVER get high-speed due to their location / technical savvy / budget. Someday, maybe modems will be obsolete, but by no means will it happen "soon"; I'd say 20-some-odd years from now, maybe.

      --
      Come to the University of Mars! Classes starting soon!
    3. Re:How many people still use modems? by nelsonal · · Score: 1

      Last i checked (admitedly about a quarter ago) broadband penetration in the us was about 10%.

      --
      Degaussing scares the bad magnetism out of the monitor and fills it with good karma.
    4. Re:How many people still use modems? by Smallpond · · Score: 1

      ...and by the time everyone has broadband, we'll also have some kind of "pay-per-view" internet sites which will be the target of future scams. New technology is all about creating new opportunities and making money. Its never about solving old problems just for the heck of it.

    5. Re:How many people still use modems? by B.D.Mills · · Score: 1

      I use dialup because I cannot get cable installed to my block of flats without having to get permission from the provider, the landlord, the body corporate and perhaps other bodies as well. It's just too much paperwork.

      I run Windows, so I take precautions against all malware. I disable ActiveX, I have Zonealarm running, and I switch my modem off when I am not using it.

      --

      The only thing necessary for the triumph of evil is for good men to do nothing. - Edmund Burke
  20. It's amazing they're doing this... by Smeagel · · Score: 2, Interesting

    For one, do you really think they were giving people refunds for these charges? Maybe Canada has some consumer protection laws or something, but from my dealings with scummy utility companies in the US, I know I'd pay every penny for a hijacked modem.

    Then on top of that, this seems such a small fix. What happens when the new virus out sets it up to call, say, Russia or China. Can't exactly block those countries. Yes yes I didn't RTFA so I'm not sure if these countries have significance more than I know...

    1. Re:It's amazing they're doing this... by spaceyhackerlady · · Score: 2, Informative
      For one, do you really think they were giving people refunds for these charges? Maybe Canada has some consumer protection laws or something, but from my dealings with scummy utility companies in the US, I know I'd pay every penny for a hijacked modem.

      In Canada you are responsible for phone calls made from your phone, and you must pay for them. As Telus point out in their article, they have contracts for overseas calls, and the calls must be paid for even if the other end are corrupt scum.

      Exactly what crime are these people guilty of, anyway? If they tell their victims that they are going to be connected to an "international number" it's hardly fraud, even if that's exactly the intent.

      There used to be lots of ads on TV for chat lines that were in places like Peru. The ads always mentioned that "long distance charges may apply". Boy, did they ever...

      ...laura, a Telus customer

    2. Re:It's amazing they're doing this... by NeB_Zero · · Score: 1

      had a problem with my brother's computer with these autodialers... phone company handled it in short order, not really a big problem with our telco...

    3. Re:It's amazing they're doing this... by Murf_E · · Score: 1

      I'm lost as to your argument here, the long distance
      charges don't pop up and say "do you want to connect
      to $country, long distance charges may apply" thats
      why they refer to it as a high-jacked modem, sorry
      if I seem sarcastic but I am confused

      --
      this sig intentionally left blank
    4. Re:It's amazing they're doing this... by Flying+Purple+Wombat · · Score: 1

      but from my dealings with scummy utility companies in the US, I know I'd pay every penny for a hijacked modem

      Not necessarily - I got hit with a bill from AT&T for $120USD for a 20 minute call to Guinea-Bissau(never heard of the place before I got that bill). I told AT&T that I was not going to pay, period/full stop. Since this was my first dispute with them, they agreed, with the provision that my local telco add an international block on my line. I agreed, and the matter was settled.

      The international block requires that I speak to an operator to place an internation call. Since I don't make international calls very often, it's not an issue for me. The block had to remain for some time (3 months?) to fulfill my part of the deal.

      It turns out that my son (then 12 years old) triggered the porn dialer. He had clicked on a link to a "teen chat site", and clicked "yes" on a pop-up, without reading it (he knows not to do that again). This launched the dialer, which dialed the international call using AT&T's access code (1010288 +1 ....). Note that AT&T is not my long distance carrier. When the porn site opened, my son closed the browser and walked away from the PC (the PC is in the living room). The modem call stayed up for another 20 minutes.

      --
      If God had meant for man to see the sunrise, He would have scheduled it later in the day.
    5. Re:It's amazing they're doing this... by Ironica · · Score: 1

      For one, do you really think they were giving people refunds for these charges? Maybe Canada has some consumer protection laws or something, but from my dealings with scummy utility companies in the US, I know I'd pay every penny for a hijacked modem.

      Even if they're not refunding charges on these calls, they're paying CSRs to take the complaint calls generated by the problem. They may also have competition from VOIP and cable-based phone service, which could cause them to lose customers altogether.

      --
      Don't you wish your girlfriend was a geek like me?
    6. Re:It's amazing they're doing this... by Ironica · · Score: 1

      Exactly what crime are these people guilty of, anyway? If they tell their victims that they are going to be connected to an "international number" it's hardly fraud, even if that's exactly the intent.

      You're right... if they did tell them, it wouldn't be fraud.

      They don't.

      You download the software, which a website says you need in order to view particular content or whatever, and it disconnects you from your ISP and dials another number instead. That number is a long-distance number which charges you lots of money. You may notice your modem disconnecting and redialing, but it doesn't have to tell you what number it's calling.

      The malware can also just make the calls in the middle of the night, when you're not using the computer. Then you *really* don't know the call has been placed.

      --
      Don't you wish your girlfriend was a geek like me?
  21. Local by Gettinglucky · · Score: 2, Informative

    I live locally to telus and one of the local television stations reported on this and said that cable modems and ADSL modems where also affected. They failed to mention anything about needing a phone modem connected to a phone line for this to affect the cable and ADSL modems. One way to create more excitement!!

    1. Re:Local by liquidsin · · Score: 1

      No, you can rack up long distance charges over the internet no matter how you connect. Check out this reference for more facts.

      --
      do not read this line twice.
    2. Re:Local by MochaMan · · Score: 1

      Not sure if they were referring to this, but Telus also just started blocking access to port 25 on all servers except smtp.telus.net. For laptop users, this is insanely annoying since Telus doesn't provide authenticated access to smtp.telus.net from outside its own network!

      As of the 22nd, every user moving on and off the Telus network has to switch their SMTP settings every time they switch locations.

  22. Internet credibility of a country by gtrubetskoy · · Score: 5, Insightful
    I think we are seeing an interesting trend where some countries are earning a bad reputation on the Internet, which will ultimately affect their economies and ability to participate in international trade.

    E.g. who in their right mind accepts credit card orders from Romania, Russia or Indonesia when it is well known that the vast majority of those card numbers are stolen?

    But I think that what is right now simply a major annoyance to on-line vendors and users (spam, phishing, etc.), will eventually backfire at the countries that are unable (or more likely do not care to) to control Internet fraud of various kind sas they become more and more blacklisted and left out of the Internet economy. This will eventually force their governments to pay attention to the issue. I bet already it is pretty frustrating to be an Internet user in one of such countries and know that most vendors on the internet will not accept any payment from you simply because of your country of origin...

    1. Re:Internet credibility of a country by Bellyflop · · Score: 1

      It does suck that countries are getting reputations on the basis of some minority in their population. However, my fear is that those countries won't change. I think that the thought process of many Western companies is somewhere along the lines of:

      1. Enter emerging market.
      2. ???
      3. Profit.

    2. Re:Internet credibility of a country by CritterNYC · · Score: 1

      E.g. who in their right mind accepts credit card orders from Romania, Russia or Indonesia when it is well known that the vast majority of those card numbers are stolen?

      Don't forget Nigeria. All of my ecommerce clients are configured to return a "We do not serve this country" message when someone selects Nigeria.

  23. Better yet by ad0gg · · Score: 4, Insightful

    Most of these international telecom LD companies use voip, and the gateway will negotiate to the right codec depending on whether its a data or voice call. Have the carrier detect whether its a voice call or data call and drop on the results.

    --

    Have you ever been to a turkish prison?

    1. Re:Better yet by LostCluster · · Score: 1

      People may have a legit reason to want a data connect with the given countries, and it usually is a violation of privacy law to do such detection without the customer wanting it. It's a great tech solution but a dumb policy.

    2. Re:Better yet by wfberg · · Score: 1

      People may have a legit reason to want a data connect with the given countries, and it usually is a violation of privacy law to do such detection without the customer wanting it.

      No it's not. If it were, 56Kbps modems wouldn't work, because they depend on the telephone exchange to detect that it's a modem connecting, and to set up a data call. All telephone companies use systems that do this. Rejecting data calls by policy is most certainly built into all the digital exchanges.

      Most European countries even filter out data calls to ISPs to offload on a separate IP network, bypassing the voice infrastructure from the exchange on.

      There might be some regulatory impediment to implementing filtering (since telcos must provide a line suitable for both voice and modem traffic) but it's most certainly no privacy issue, and detecting data calls happens automatically anyway.

      --
      SCO employee? Check out the bounty
    3. Re:Better yet by king-manic · · Score: 1

      When was the last time you did a data call to Guyana? List soem legitamate reasons. BBS's? that about it. and odn't tell me Gayana is a BBS mecha that all geeks must dial once in their life times or face eternal damnation in the microsoft campus.

      --
      "There are more things in heaven and earth, Horatio, than are dreamt of in your philosophy."
    4. Re:Better yet by alienw · · Score: 1

      You think nobody ever sends international faxes?

    5. Re:Better yet by greed · · Score: 1
      People may have a legit reason to want a data connect with the given countries,

      Have modern systems lost the ability to place a call manually, and then have the computer seize the line once the connection is established?

      If you needed to place a data call, dial it by hand, confirm with the operator, and then have your modem go on-line and begin negotiation. Would work fine for fax too.

      Though it would suck if you needed to redial regularly....

    6. Re:Better yet by Anonymous Coward · · Score: 0

      Mecha?

    7. Re:Better yet by king-manic · · Score: 1

      mecca

      --
      "There are more things in heaven and earth, Horatio, than are dreamt of in your philosophy."
    8. Re:Better yet by iantri · · Score: 1

      Just because you don't need to make, say, international faxes, doesn't mean others don't.

    9. Re:Better yet by iantri · · Score: 1

      They haven't; but this is much easier to do in a terminal than in a fax program that expects to be dialling the call...

  24. um... by Run4yourlives · · Score: 1

    I think the idea is that the malware creator owns a 900 number in the countries listed, so he makes a buck from the telco.

    Kinda pointless if you're not getting any money.

  25. Re:too late by Wudbaer · · Score: 1

    Hello ? We are talking about phones here, not email spam. Got in the wrong topic ?

  26. Not even that..... by spectrokid · · Score: 4, Interesting

    A consumer protest broke out about this in Denmark some time ago. The first IP adresses encountered when dialled in were in.....London. The operators charge the long distance call, but your phonecall actually never reaches the country of destination. The blocking described is now standard for all Danish telco's.

    --

    10 ?"Hello World" life was simple then

    1. Re:Not even that..... by anticypher · · Score: 1

      There was a case a while back (mid-90's?) where the Danish telco was terminating certain international calls at a call centre inside the country. Thus, they didn't have to pay termination fees to the other country's telcos, and kept most of the money for themselves and gave some of it to the scammers. IIRC, there were romance lines advertised late at night in other countries like Germany and Sweden, as well as loto/gambling scams with African and American country codes.

      I think the legal parts of this case are still going on, but I can't google up any linkable details (because my dansk is not up to snuff anymore)

      This is a pretty common scam in countries where there is no oversight of telco practices.

      the AC

      --
      Hemos is like...sci-fi fans;he thinks technology is cool, but he hasn't bothered to understand the science it's based on
  27. Actually... by Anonymous Coward · · Score: 0

    Most distros the callout devices are owned by the "console" group, so if the logged-in user were to run such a program, it would dial-out no problem.

    Of course the dialler would have to be written for linux and the process would have to be a child of the login process (or local xdm), so no cron jobs.

  28. Not that obscure... by aborchers · · Score: 1

    You should get the boot for that post!

    --
    Trouble making decisions? Just flip for it.
  29. Where can I get this autodialler script for linux? by dogsbestfriend · · Score: 5, Funny

    amazing. I never thought anything would do that on my toshiba laptop running linux. It was hard enough setting up any kind of dialling on the linmodem, if those scripts would have set up my modem for me and dialed a number, I would have gladly paid for it :)

  30. Government Monopolies? by reallocate · · Score: 2, Informative

    How many of those monopoly phone companies are government monopolies? "Posts and Telecoms" remains within the government in many places.

    --
    -- Slashdot: When Public Access TV Says "No"
    1. Re:Government Monopolies? by akintayo · · Score: 2, Interesting

      At most one of these Nauru remains a government monopoly. Two of them, Sao Tome and Guinea-Bissua are owned in part Portugal Telecom which seems to be a former Telecom monopoly, now privately owned. The other, Guyana is a majority owned by ATN, an American company.

      So it seems it isn't 'the corrupt third world governments' behind this 'problem'.

      --
      Woe be on to them, all who rise against poor people, shall perish in a the end. Buju Banton
  31. Talk about a phone call... by pctainto · · Score: 2, Funny

    I am sad to say that I was caught by one of these auto-dialers about 7 years ago. I was looking for porn (in 8th grade, I think) and saw one of these "free porn" dialers. Anyway, I heard it dial and everything -- but I didn't think it was international. Anyway -- I was stupid and actually stopped looking at porn after maybe 5 minutes, and stayed on the line, browsing, for an hour. The call cost my parents $500. My mom got the bill and immediately called to complain and AT&T said it was a pornographic number, so they nailed me. Anyway, my mom complained to the company that I was just a supid kid, and they waived the fee. So, my mom, who was about to pay this $400 was so happy that she got it waived that she bought me a digital camcorder ($800) for Christmas (which was about a week away). Who said porn never pays?

    --
    I think my principles are reachin' an all time low
    1. Re:Talk about a phone call... by Anonymous Coward · · Score: 1, Funny
      "So, my mom, who was about to pay this $400 was so happy that she got it waived that she bought me a digital camcorder ($800) for Christmas"
      • You make any movies of your own?

    2. Re:Talk about a phone call... by FireBreathingDog · · Score: 1
      she bought me a digital camcorder ($800) for Christmas (which was about a week away). Who said porn never pays?

      And what are you using that camcorder for, hmmm???

    3. Re:Talk about a phone call... by Anonymous Coward · · Score: 0

      You got a digital camcorder 7 years ago (circa 1997) for only $800 dollars? What store was it? I'm looking to buy a hoverbike.

    4. Re:Talk about a phone call... by titzandkunt · · Score: 2, Funny


      "...I was stupid and actually stopped looking at porn after maybe 5 minutes..."

      Don't feel too stupid. Or bad.

      It's not a coincidence that well-produced porn films feature some kind of "crescendo" every nine minutes (approximately).

      Holding on for five minutes is pretty good for an 8th grader!

      T&K.

      --
      Political language ... is designed to make lies sound truthful and murder respectable...
  32. The telco *has* to be in cahoots... by blorg · · Score: 4, Interesting

    ...with the dialer company (the telco in the foreign country, that is) - otherwise the dialer company would not make any money! The only way that the scam can work is that the foreign telco passes on some of the call revenue to the dialer company. Having said that, in some countries the home telco should also be held responsible - for example, here in Ireland the monopoly telco has specifically put all of the 'dialer countries' into a special band, for which they charge 360c/min, *three times* what they charge for the next band down (122c for 'rest of Pacific Rim'). As such, they make substantially more than the dialer companies themselves out of these scams (which doesn't motivate them to fix the problem.)

    I think generally it's not that the phone company is in cahoots with the dialer company, it's just that they don't bother to regulate it or their government hasn't passed laws officially banning the practice.

    1. Re:The telco *has* to be in cahoots... by mnewton32 · · Score: 1

      I work for a long distance provider, and our rates from the west coast of North America to Diego Garcia are $1.60/min, Tuvalu and Guineau Bisseau are $0.99/min. That's our rates. We charge the customer 2-3 times that much, which seems pretty much inline with Eircom.
      I know how frustrating Eircom can be, having lived in Ireland for a couple of years (and having waited 10 weeks to get my phone line set up!) but I don't think they're ripping anyone off too badly with those rates.
      Other providers with cheaper rates are probably using VOIP to lower costs (and call quality.)

  33. I got away to stop that with out this idiotic idea by Chanc_Gorkon · · Score: 2, Funny

    Implement free highspeed internet for all of your country! Then people can't use the excuse it costs too much!

    --

    Gorkman

  34. Password the Modem? Require User To Verify Calls? by reallocate · · Score: 1

    What about putting code -- in the modem, the OS...somewhere -- that requires the user to verify the call before putting it through? Password it, too, to prevent an automated dialer from doing an end run.

    Or, why not just password modem access?

    --
    -- Slashdot: When Public Access TV Says "No"
  35. I'm not sure I understand... by Moofie · · Score: 0, Redundant

    So people have their computer connected to a telephone line? How quaint!

    : )

    --
    Why yes, I AM a rocket scientist!
    1. Re:I'm not sure I understand... by stinkyfingers · · Score: 1

      You think that's quaint? Some of these people apparently have soda can holders equipped with their computers.

  36. Telus not the only one by Malc · · Score: 2, Interesting

    According the to end of this story, British Telecom are going to start doing the same thing too.

  37. Yet one more way... by patrick.whitlock · · Score: 1

    for people to not be held accountable. all the dialers i've ever ran across were for porn. and not the good ol american fuckin pron, its usually for something that isn't normally allowed outside of certian countries. But, I am of the mind that if you dont read the eula, you want to see that porn, and you don't realize that there's a shitload of extra numbers in your modem's dial-out, then you should enjoy the $1200 phone bill to rowanda..

    1. Re:Yet one more way... by NuclearDog · · Score: 0

      That's my opinion, too.

      The phone companies should maybe provide a bit of educational material, to show these people how they probably got the dialer, show them what not to do, and make them pay the full bill, anyone with an IQ greater than my belt size won't do it again. Maybe tell them to hang the $1200 bill on their wall as a reminder...

      ND

      --
      This statement is forty-five characters long.
    2. Re:Yet one more way... by Slashamatic · · Score: 1

      There are many dialers and they aren't all porn linked or obvious when they download. Many are poorly written and even if the customer isn't directly effected (i.e., ADSL subscriber), the system becomes unstable.

  38. Old trick by Cyberhwk · · Score: 3, Funny

    This is something that has been going on for a while now. I remember this happening when I was in middle school and when my dad got wind of this trick he kept panicking thinking that I would download some malware. I never had an issue with this and the only one who was likely to do something like this was my mother. She used to want to download that purple monkey thing and it took me a couple months to convince her not to do that anymore and finally I just got sick of having to fight all the stuff she downloaded and reformated her computer. Since then she has not downloaded random things.

    1. Re:Old trick by statusbar · · Score: 1

      The thing that most people here are not understanding is that many of the 'dialers' are installed via unpatched Internet Explorer holes and do not require even a 'yes, I want to install this dialer program' request. So the casual web browser person who unknowingly got forwarded to a malicious website can get hit with it.

      --jeff++

      --
      ipv6 is my vpn
    2. Re:Old trick by Cyberhwk · · Score: 1

      You're right and you should be moderated up higher than what I got just cause i was cranky. Anyways, When I was talking about was in middle school. That was a long time ago. Back then it wasn't something that you could just have installed by themselves as I recall. I could be wrong but during that time there were still browser wars with nutscrape and microsucks exploreher.

  39. Funny Story related to the subject by Anonymous Coward · · Score: 0

    A friend of mine lived on a Naval base with his parents and he went to the wrong pr0n sites and got something on his computer that ended up dialing some communist country. So of course the MPs show up at his door the next day wanting to know what buisness they had dialing our "enemies" from a government base. Luckily he just showed them the sweet commie pr0n collection he had acuired and all was forgivin. God bless america.

  40. Already happened by pommiekiwifruit · · Score: 1
    Try and order jewelry from amazon.com

    They accept orders from all 48 states :-)

    (or occasionally 50. Tough luck if you are in Pago Pago or Puerto Rico, let alone a foreign country).

  41. CERT? CERT?? Isn't That An Antacid Tablet? by reallocate · · Score: 2, Insightful

    >>
    Remember last week, when CERT recommended MSIE users consider switching browsers, and MSIE usage fell to under 10%? It didn't happen quite that way, now did it?


    CERT publishing a security notice is nowhere near "educating the public".

    No one apart from geeks has heard of CERT or sees their notices. Say "CERT" to someone and they'll assume you're talking about an antacid tablet.

    It's typical of some people employed by or enamored of a technical specialty to blame the "public" for not being as specialized as they are.

    Besides, if someone wants to start educating the public, I'd rather they begin with things like using a turn signal.

    --
    -- Slashdot: When Public Access TV Says "No"
  42. I for one welcome our new Telus overlords.... by GoClick · · Score: 1

    Actually I do live in "The Tleus Zone" and they are a great phone company. But I don't like this. Stupid people deserve to be punished for downloading Brity-Spears_CumShot.exe plus it keeps me employed,m no seriously THAT file keeps me employed.

    1. Re:I for one welcome our new Telus overlords.... by Anonymous Coward · · Score: 0

      telus is a great company? please, let me have a hit off that bong.

  43. Did the calls ever go to those countries at all? by Animats · · Score: 3, Informative
    The FTC has already acted in a porn dialer case. In that case, the calls were addressed to a country code in Madagascar, but were actually routed to London. There was another case where high-rate calls were routed to Canada.

    Usually, these scams involve some marginal "billing service" provider. Integretel, eBillit, Payment One, and Verity International are some of the names that come up.

  44. Better Solution by Billy+the+Mountain · · Score: 2, Insightful

    Offer a free international call blocker to all subscribers and allow them to block out all the countries they are reasonably sure they would never call. When you try to call a foreign country that's blocked, a recorded message gives instructions on the procedure for removing the block.

    --
    That was the turning point of my life--I went from negative zero to positive zero.
    1. Re:Better Solution by Anonymous Coward · · Score: 0

      yknow.. I had my long distance carrier set to "no carrier" just to keep my dumbass roommates from running up huge phone bills.

      then i found out that if they just dial 10-10-whatever, they can still make LD calls, & i get to pay even more!

      when i asked my phone company about this, they told me they could block the 10-10 services, but it entailed a monthly fee.

      can you believe that? you have to PAY them to NOT RECIEVE THEIR SERVICE!

  45. Protecting its own interests by Anita+Coney · · Score: 4, Insightful

    Telus is not doing this to protect its customers, it's doing it to protect is own bottom-line. I would imagine that the vast majority of people caught by the modem high jacking scam refuse to pay their bills. They call and complaint, Telus backs down, and it is stuck holding the bag.

    This strategy ensures that Telus is never stuck again, plus, it gives them good PR because it appears that it is looking out for its customers. Yeah right.

    --
    If someone says he and his monkey have nothing to hide, they almost certainly do.
    1. Re:Protecting its own interests by rsmith-mac · · Score: 1

      Does it really matter what their motivation is though, as long as they're doing it? The fact of the matter is that this change benefits everyone, and that's what's important.

    2. Re:Protecting its own interests by Idarubicin · · Score: 4, Insightful
      This strategy ensures that Telus is never stuck again, plus, it gives them good PR because it appears that it is looking out for its customers. Yeah right.

      In this instance, a company can do something that

      protects their bottom line and shareholders;

      protects their customers; and

      screws the malware writers;

      and you're bashing them?

      Hey, I'm thrilled that a company is making more money while doing something that's good--even if it is a telephone company. What's wrong with a little enlightened self-interest?

      --
      ~Idarubicin
    3. Re:Protecting its own interests by Anonymous Coward · · Score: 0

      So, in your mind, Telus should not block the phone numbers and let customers rack up several hundred dollar phone bills?

      Very smart logic.

  46. Not just Telus, SaskTel also by Linegod · · Score: 1

    Telus and SaskTel are doing the same thing. Read at CTV

    --
    -- I care not for your foolish signatures.
  47. Re:Telus has horrible ideas and policies by TMacPhail · · Score: 0, Offtopic

    Funny, I seem to still be able to access port 80 and 21 on my home computer that is connected through telus.

  48. Re:too late by Anonymous Coward · · Score: 0

    Most spam that appears to originate from Telus is in fact just using forged headers. Try doing some research before jumping to conclusions.

  49. No, it the public heard by metalhed77 · · Score: 3, Informative

    The CERT bulletin he's referring to was published in the Washington Post actually.

    --
    Photos.
    1. Re:No, it the public heard by reallocate · · Score: 1

      Right, and I've seen reports based on it in several places.

      Still a long, long way from "educating" the public, not that that is the media's job.

      --
      -- Slashdot: When Public Access TV Says "No"
  50. Why not block int'l dialing? by ElForesto · · Score: 1

    Maybe I'm just over-simplifiying, but shouldn't telephone customers be able to block dialing out of their country/region by asking their telco? Isn't that a simpler approach to the problem?

    --
    There is a difference between "insightful" and "inciteful" other than spelling.
  51. Yeah, this sounds great, but... by dan_sdot · · Score: 1

    ...what if you have a talking modem? Then you're still screwed.

  52. Isolated in Canada. by Anonymous Coward · · Score: 0

    What is gonna be for those persons from Guinea-Bissau, Guyana, Nauru and Sao Tome living in Canada. Is it legal to isolate a person from their native country just because a buch of wackos download every piece of crap off the internet?.

    I can imagine people rabbling beacause they can't call to those countries for a major sweepstakes contest going on there.

    What about organ donors....

  53. Telus scamming by phorm · · Score: 1

    I ran into an individual that paid out for this, several hundred dollars. The problem though, is that he is a dialup user. The other problem is that he only has a single phone-line.

    When not in use for the net, the phone-line is disconnected from the modem... since the fax machine or something like that uses it also.

    Telus charged him for such a call... but it seems to me that he couldn't have even made it:

    -Phoneline likely disconnected
    -When connected, phoneline was already dialed out (can't double-dial) -If dialing out, phoneline would interfere with normal fax/calls


    Glad to see Telus is doing something about this, but how many people could they have charged, claiming it was the computer's fault, when in fact there was no dialer infection.

    1. Re:Telus scamming by Flying+Purple+Wombat · · Score: 1

      When connected, phoneline was already dialed out (can't double-dial)

      The dialer that my kid triggered disconnected the existing dial-up connection (local call, no chage) and then dialed the porn site (long-distance, huge fee). My kid didn't notice the disconnect/re-dial.

      --
      If God had meant for man to see the sunrise, He would have scheduled it later in the day.
  54. So much for that line of work... by greenegg77 · · Score: 1

    There goes my Canadian scam-dialing trojan franchise. Guess I'll have to turn to spam for a living.

    --
    --- This .sig for sale - $500 OBO.
    1. Re:So much for that line of work... by Barbarian · · Score: 1

      There goes my Canadian scam-dialing trojan franchise. Guess I'll have to turn to spam for a living.

      "HAHAH OMG GUYS THAT WAS ME. LOLOLOLOL I'M ONE OF THE VILLIANS IN THE STORY GET IT? ROFLS"

  55. You mean like this device? by Hamster+Lover · · Score: 1

    You mean like this? C$69.99! Having worked for RS in the past, I have used this device and you can program it to block specific numbers, long distance numbers, etc.

  56. [OT] Re:Not really "putting a stop to it" by plugger · · Score: 1

    Ah, that was the reason? If they had come out straight and said so, instead of bullshit WMD claims, I'd have more respect for anything the US & UK governments had to say about it now.

  57. The whole concept of premium rate is a scam. by Anonymous Coward · · Score: 0

    Isn't this effectively making your telephone account a credit account and making your telephone company an unlicensed credit provider without the protections that laws provide?

    Roll on free VoIP!

  58. Re: I, for one, welcome our new Nigerian overlords by Citizen+of+Earth · · Score: 1

    If we assume that 1-million of these messages are sent out every day for an average of $20M, then Nigeria must have a GDP of at least $7.3-quadrillion, which is nearly a thousand times that of the USA. And some people think that globalization is bad for third-world countries.

  59. Not Nigeria... by nightwing2000 · · Score: 1

    Dr. Mbingo Mbango Mbongo
    Doesn't want to leave the Congo,

    Oh no no no no!

  60. Re:CERT? CERT?? Isn't That An Antacid Tablet? by Anonymous Coward · · Score: 0

    No it's a breath mint something most geeks have never heard of.

  61. Re:Telus has horrible ideas and policies by Anonymous Coward · · Score: 0

    They did that because of exploits that use those ports. Port 22 is still open.

    I doubt they lost more costumers. Many regions serviced by Telus only have Shaw as the competition (or at least main competition). Shaw meters usage. Telus doesn't meter usage. That's my whole reason for being on Telus that I can upload 120GB in a single month and get phoned up asking if I am aware of their new services they are offering--not getting told to limit up my uploading to 1GB. Not to mention that most users do NOT host their own servers.

    You also did not need to switch ISPs, but to upgrade to one of their plans that ALLOW server hosting. Commercial accounts didn't block those ports.

    Personally I don't like this and would prefer an opt-out policy. Considering all the people who don't know anything and end up downloading executables from Kazaa, I do find it quite a great idea for most users.

  62. Go after the dialer producers?? by PetoskeyGuy · · Score: 4, Insightful

    That's very stupid. They should go after your friend and people who make money from others. You can bet some poor sucker got paid $50 or less to write the dialer if they even got paid. Once it's made, you have it, just change the number it dials.

    It's the telco's and the porn companies that need to be held accountable since they are the ones distributing and profiting from this computer hijacking. They could possibly face jail time for that if they are in the US. Not sure, but it seems there are stricter laws all the time.

    Writing a dialer is pathetically easy. Even from a simple DOS prompt, one liner
    echo "atdt 1-123-456-7890" > com1:

    This is once step BELOW spammers in my opinion, and your using the same pathetic excuses they do. People shouldn't make it so easy to do. Spam at least is only for idiots. Your taking control of computers and waiting until people won't notice.

    It's not email software or dialer software that is the problem. It's the scum who take these useful tools and use them to try to rip people off.

    1. Re:Go after the dialer producers?? by Bellyflop · · Score: 1

      As I mentioned in another thread - you're confusing a billing system with one made only for dialers. These billing systems support the run of the mill porn site but are also bought by dialer companies to track the money that they are making.

      I don't think that you're reading it quite carefully enough. He doesn't run the dialer company - They are the ones that are using dialers to rip people off. You're mistaken to think that the dialer firm paid the guy $50 to write the dialer. The guy who wrote the dialer IS the dialer firm.

      I'm shocked your getting modded as insightful - you're insight is really based on some erroneous assumptions.

    2. Re:Go after the dialer producers?? by PetoskeyGuy · · Score: 1

      I must admit I know next to nothing about the porn industry. I wasn't suggesting the billing system was the problem, or that he ran the dialer company. I didn't even know there was a dialer company. Sounds like a hello world company to me.

      A dialer is super easy to write. I just don't see how any one could make money from it. The source code of how to do it is available in almost every programming language. They must make their money by tricking people into installing taking a cut of phone call charges. Maybe I'm wrong on that account too.

      My point is dialer makers create and profit from tools that hijack computers. That's a Bad Thing. Porn sites use those companies to somehow make money. Getting rid of one spammer is not the solution, others will replace them. I believe it's the same with dialer makers. So go after the companies, porn or otherwise who use hidden dialers to hijack computers and make money.

    3. Re:Go after the dialer producers?? by Bellyflop · · Score: 1

      Ahh it seemed that you thought my friend was doing something illegal when you said that they should go after him. The dialers are more than just the technical issue of making a modem dial a phone number - they are little pieces of malware that need to hide themselves from scanners and figure out what a good time to call is. Yes, they're definitely not good things. I don't think anyone is arguing that they are. The problem is what they are doing isn't expressly illegal in many countries. So there's no way to really go after them. Eventually, their practices are made illegal and then they just close up shop and move to another market.

  63. how ironic by Indy1 · · Score: 1

    Telus blocks other scammers and abusers, but does nothing about its own network of scammers, spammers, and abusers.

    http://www.spamhaus.org/sbl/listings.lasso?isp=t el us.com

    --
    Lawyers, MBA's, RIAA? A jedi fears not these things!
  64. Ah! I never knew... by Neo's+Nemesis · · Score: 1

    "Telus, a major telco in Canada, decided to block long distance direct-dialed calls to four countries to help reduce dial-up 'modem hijacking'."

    Ooh! there were only 4 countries in world. And I had already littered my minds with so many names. Damn it. Thats why i always wondered that names like Canada, or Brazil, or China can never be of countries.

    There's much more widerspread modem hijacking associated with many other countries. Just ban all of them then, isn't it. Give people a "busy" errortone when they try to connect, or a "please wait all lines dedicated to an emergency situation" message.

  65. I don't get it. by Anonymous Coward · · Score: 0

    I'm sorry. I don't.

  66. Busted by duffer_01 · · Score: 1

    My sister in law was hijacked and called Bell to ask what was going on. The customer service rep told her about the scam and also added that typically this hijacking comes from surfing porn sites. Woops! Looks like her roommate had been using her computer. I wonder how many husbands have been busted over this. :-)

  67. Re:Password the Modem? Require User To Verify Call by Smallpond · · Score: 1

    because a program able to install an autodialer is also able to watch your keystrokes and remember your password.

  68. Telco Security Insider View by Anonymous Coward · · Score: 5, Interesting

    I apologize for posting anonymously, but I'm under non-disclosure on this. I work in the security department of a major long distance provider. Telus's blocks are a good try, but they won't stop the problem. They will put a small dent in it, though.

    First of all, it's more than those four countries, although that's about half of the most common ones we've been seeing lately. At the very least, they should have added Diego Garcia, Tuvalu, and Tokelau to the list. But almost every really small, really poor country telco goes in for this kind of thing sooner or later, and at one point so did one of the UK telcos and (oddly enough) so did one of the Canadian telcos.

    Do not assume that there has to be a modem on the other side. Your modem doesn't have to sync for you to get charged, it just has to stay dialed into that number long enough for the "first minute" charge to take effect.

    The billers keep insisting that everybody who gets billed for these calls has agreed in advance to do so. At least some of them are lying about this. We have seen cases where we're absolutely sure that unlabeled trojans were to blame, including one that sets the user's computer to do so at least once a day for up to a couple of hours when they're not using it.

    There are only two completely reliable defenses against this. The only completely reliable was is to never, ever, ever plug an analog phone line into your computer. (I had one customer insist that it couldn't have happened to them, they used broadband. But they had a fax modem card, and the dialer detected and used that.) That's not practical for most people, so instead call your local phone company and ask for a total block on directly dialed international calls. Most companies offer this as a free service. Also make absolutely sure, if you never intend to charge premium services to your phone bill, that you tell this to your local and long distance phone companies; having that note in the records on your account will help their security people know to block the calls more quickly when they get by and may, the first time, help you get the charges removed from your bill.

    You can ask your long distance provider to block international directly dialed calls, too, but that'll only help if you get that block from every long distance provider in your country, and in the US that could take you weeks of research because there are so many. But if you're in the US and you don't block every long distance provider, all the dialer authors have to do is preface the modem string with 10-10 and the three-digit carrier code to temporarily switch your long distance provider. That's why it's going to be a lot more reliable if you do it through your local phone company, if they offer the blocking feature you need.

    After you've blocked the feature, if you absolutely have to make a directly dialed international call, call your local company and your long distance company, remove the block, wait for it, make the call, and then call them back and restore the block.

    US long distance companies aren't blocking whole countries for this because US law won't let them. Telcos are required to deliver every call that you want them to. This means that while we can temporarily stop your service until we can ask you "did you really want to make that call?," we can't pre-emptively stop you from calling poisonous numbers like this because we can't prove that nobody wants to call them. On the contrary, probably about 1 out of ever 20 customers that I speak to about this really did use the dialer on purpose and they intend to pay for the call. (About 3/4 of the callers, though, had it happen because somebody who didn't have their permission to charge long distance calls was sitting at the computer surfing porn or using paid gambling sites without the owner's knowledge. Frequently, it's their kids.)

    My employer doesn't want me to tell you this because it is their opinion that every time we reveal anything about what we know about this scam (or any other),

  69. Exactly by phorm · · Score: 1

    The could just continue allowing customers to amass calls, f*** them over for the bill, and collect.

    Most people aren't willing to go to a collection agency over this, so I doubt Telus was being bent over the barrel and losing money (in many cases I've heard the user did pay, which they rightfully should being the one who downloaded idiotic sh*t).

    By doing something, it shows that they're aware of the problem, and are willing to do something about it on their end (while not taking actual responsibility for the fact that their users download idiotic sh*t such as phonedialers).

  70. Troll by phorm · · Score: 1

    You can still call them, you just have to have the operator help you make the call (or use a phonecard, which is probably cheaper anyhow).

    Nobody is cut off. Slightly inconvenienced perhaps, but Telus is even waiving the fees for the operator-assisted call to those countries.

    Got a better idea?

  71. Telus ... by Anonymous Coward · · Score: 0

    still sucks. and is still over priced.

  72. nicer idea by Doc+Ruby · · Score: 1

    The telco could require that the foreign telco itself require a voice affirmation while connecting the call, agreeing to the charge for the call, in order to connect calls automatically. If disputed, the charging telco could produce the voice affirmation.

    --

    --
    make install -not war

  73. Too Hilarious by anicholo · · Score: 1

    omfg, this is too mucho... I mean, Sao Tome, come on, Ranma Saotome! I've got to go there some day, just for the hell of it's name.

    --
    We are The Atheists. Lower your egos and surrender your beliefs. Resistance is futile.
  74. Governments are big part of the problem by swb · · Score: 1

    The governments are a huge part of the problem. In many cases, the "government" is whatever collection of dope dealers, gun runners and paramilitary thugs can gain predominant control over whatever the UN considers to be the government of the country, and this generally includes the post and telecom monopoly, the central bank, and the customs system. It's not that some of them are corrupt, it's that corruption *is* the system.

    This will eventually force their governments to pay attention to the issue.

    Not really. "The people" are generally just a source of low-end conscripts to be given whatever Enfields are left over from British colonial occupation and thrown at whatever border region is most troublesome this month; they could care less whether they're able to "participate" in the internet economy. Anyone who matters has access to dollar/euro/yen markets overseas, and can buy what they want.

    If eventually they make "the world" pissed off enough (ie, European and American central banks ban wire transfers), they'll just hang a couple of wanted "terrorists" out to dry (typically for being behind on their protection payments) for western military interests and use it as leverage to get back in the game.

  75. Immunity by Atario · · Score: 1
    Of course, I personally haven't seen a modem in years...
    Same here. Funny thing is, it seems like these dialer scams missed the boat. They should have come out in the early 1990s, when modems where the hot tech item, and no phone companies (much less victims) were at all ready to deal with something like this. I've been on cable since 1999 and never looked back, yet I've only seen these dialer scam programs in the last few years or so.
    --
    "A great democracy must be progressive or it will soon cease to be a great democracy." --Theodore Roosevelt
    1. Re:Immunity by No+Such+Agency · · Score: 1

      Funny thing is, it seems like these dialer scams missed the boat. They should have come out in the early 1990s, when modems where the hot tech item, and no phone companies (much less victims) were at all ready to deal with something like this.

      Yeah, but the "hot tech item" is also more likely to be owned by expert users. Nowadays, "lowly" modem users are often families and casual users with little technical knowledge. Which group will be easier to prey upon via technological means? They didn't miss the boat, the scam merely wasn't worth doing until they could target the right demographic.

      --
      Freedom: "I won't!"
  76. Re:CERT? CERT?? Isn't That An Antacid Tablet? by reallocate · · Score: 1

    You're right. I was thinking of TUMS, something I expect geeks consume in quantity.

    --
    -- Slashdot: When Public Access TV Says "No"
  77. Solution by g0bshiTe · · Score: 1

    Don't download those autodialer programs. I have had the odd one try to install on my machines before, big whoop. Click the Close button and bingo, no modem hijacking and no long distance calls.

    --
    I am Bennett Haselton! I am Bennett Haselton!
  78. Re:CERT? CERT?? Isn't That An Antacid Tablet? by Ironica · · Score: 2, Funny

    Say "CERT" to someone and they'll assume you're talking about an antacid tablet.

    I can't stand the rampant ignorance about common pallatives! Certs are breath mints, not antacids, you ignoramus!

    I swear, people just don't even pay attention in the supermarket anymore. When will we have a serious effort to educate people about the proper uses of common products? This is how children end up in the hospital from Tums overdoses.... ;-)

    --
    Don't you wish your girlfriend was a geek like me?
  79. I still use a modem... by mikeb39 · · Score: 1

    As a backup when the ADSL goes down, (get 4 hours dialup included in my ADSL plan), in my laptop on the road to rural places where there's no broadband/wireless, and also to recieve faxes on the computer from some of my more digitally challenged clients.

    Dying...yes, but it's going to be a useful "fallback" for awhile yet.

  80. I turn off my external modem when it is not in use by Anonymous Coward · · Score: 0

    I use an external serial modem and turn it off when I am not using it. If one of those dialers was on my computer and tried to place a call it would find that the modem was turned off. Years ago, I got into the habit of always turning off my modem when it is not in use.

    I have two phone lines at home and the one for modem on is blocked for all long distance calls. That would also stop the phone dialers. It is an option that the telephone company offers. I use an ordinary phone line for my Internet connection because DSL and cable is not available where I live.

    I use Linux most of the time on my two home computers and phone dialers and are not a problem with Linux. Linux users almost never have problems with phone dialers, adware, spyware, viruses and worms. Once in a while I do boot it up into Windows. Of course with Windows I regularly scan for spyware using both Ad-Aware and Spybot Search and Destroy. I also keep the virus signatures up to date, the spyware software up to date, use a firewall and install all of the latest security updates for both Windows and Linux. There are also a list of IP addresses that I block in the host file in both Windows and Linux. With all of that I hope that I have bocked most of these kinds of problems!

  81. BT also blocking numbers by Stuart+Ward · · Score: 1
    There is an article up that BT is to block the premimum rate numbers used for these types of scam.
    BT Retail will block calls to premium rate numbers allegedly associated with rogue diallers.

    "We have decided that BT does not want a penny of the money generated by these problems," said Gavin Patterson, BT group managing director.

    "We have decided to act on this issue, which is causing genuine concern to us and thousands of our customers," he said in a statement.

  82. Where American not the US of A by Anonymous Coward · · Score: 0

    Canadian are the American not the US of A , we dont invade people costing us billions of USD , killing thousand of our troops and hundreds of thousand of civilians without being firstly under attack. Because one idiot in that country is spitting at the mouth. We are not afraid of anyone , we dont first strike but we win all the wars we enter.

    C ourageous
    A merican
    N oble
    A merican
    D efender of
    A merica

  83. Modems by Rhinehold · · Score: 1

    Why would ANYONE still have a modem in their computer anyways? *shudder*

  84. telcos are more accountable by GunFodder · · Score: 2, Interesting

    The problem with going after the producers and distributors of the dialer software is that it ends up being whack-a-mole. Any scam artist worth their salt is perfectly capable of shutting down one scam under legal pressure and opening a new one. Going after the telcos is much easier, even if the dialer agents are more culpable.

  85. Not correct by westendgirl · · Score: 2, Informative

    That's not true. Telus has had long distance competition since 1992 and local competition since 1997.

    --

    -- SYS 64738 --

  86. Content carriers & an example of Guyana hijack by westendgirl · · Score: 1
    Telus doesn't have to refund the charges, as it is a content carrier, not a content provider. In Canada, telcos are considered carriers of content, and are therefore legally prohibited from blocking the flow of content, regardless of source. (Of course, the direct dial option is a clever way to get around fraudulent calls.) They can block certain traffic flows if the customer pays for the service, but otherwise regulating content would be a real hot potato. If telcos became responsible for content, they could get into trouble for anything people did on the phone -- e.g. crimes.

    As for the countries in question, I've heard that they are the source of many fraudulent calls. According to my Telus statement from today, they all use North American area codes. A number like 1-592-XXX-XXXX looks more like it's going to London, Ontario than to Guyana. One of my friends called last month, because her modem had been hijacked. Every time she turned on the computer, it called Guyana. She had hundreds of dollars in charges, and could not find the evil applications, despite running Spybot, Adaware, and other programs. (I told her to, um, unplug the modem. And a search of all user profiles on her family's computer revealed the nasty xxxdialer.exe in a family member's files.) She fought hard with Telus, but I'm not sure they ever refunded the charges. I doubt they would -- it all goes back to the content carrier issue.

    --

    -- SYS 64738 --

  87. PIN number toll-bar by zcat_NZ · · Score: 1

    One of the options that our teleco offers is a pin-number based toll-tracking. You get two or more pin numbers for everyone who's going to make toll calls, and a correct pin number has to be dialled before the call will go through. At the end of the month the total for each pin number is listed separately on the bill. Since basically nobody dials long-distance for their internet connection, there's no reason to have a valid pin number anywhere in the computer, so your average porn dialler is going to be SOL (or if they catch on, at least it's going to have to make a LOT of calls before it finds a pin that works.. and the teleco could check for repeat-pin-failures and start reporting them to the customer if it ever became a significant problem.)

    But of course your own teleco also makes a profit on these calls, so there's not all that much incentive for them to find a real solution to the problem.

    --
    455fe10422ca29c4933f95052b792ab2
  88. Verizon still blocks cell-calls to Ukraine by mi · · Score: 1
    And has done so for years. They just recently opened Russia up:
    • I'm sorry, but this country is blocked due to high volume of fraudulent calls.
    • Well, you just added Russia, which was blacklisted too -- are you implying, Ukrainians are more fraudulent?!
    • No, I did not say that...
    --
    In Soviet Washington the swamp drains you.
  89. This is not new by Koutarou · · Score: 2, Informative

    KDDI in Japan did this years ago.

  90. duh... by Anonymous Coward · · Score: 0

    >> If Telus operates in a province in Canada, it has
    >> a monopoly for the entire province.

    That is totally WRONG.

  91. Hahaha funny by KaiLoi · · Score: 1

    Actually this is pretty funny. We had the same problem here in NZ only instead of blocking the calls totally (Which is a little harsh) we make it so if you call a number in a "suspect" country (of which there are about 10) then you get prompted to hit a random number to continue (i.e sometimes it's 1, sometimes it's 9 etc etc) This allows a real person to proceed while a porn or trojan dialer is thwarted. Well at least until they figure out how to write a voice recognition module for their trojan.

    We had a major TV article on this here in NZ just the other day. And yes I work for IHUG.

    http://tvnz.co.nz/view/tvone_minisite_story_skin/4 32505%3fformat=htmlLink to story

  92. SPEWS anyone? by tod_miller · · Score: 1

    Perhaps we are already doing this for spam, but there are many more SMTP servers than telco exchanges.

    Perhaps all telco exchanges should run a SPEWSesque system, so they can bloke all these fraudulent telephone scams from all countries.

    I would like to see a quick way of combatting fraud, even if it is the uneducated who suffer.

    Of course, the solutions of blocking works if you want to send an email to a person, akin to calling them (via an operator) but to stop recieving them (lets talk about telemarketing and spam shall we?) we need a numeric block list, at a small charge, someone can call via an operator, and have their name and intention announced to you, and you can decide to accept the call.

    A legitimate caller would do such a thing, and be on your accept list. Telemarketting people wouldn't!

    Now can we open up the exchange API's and slot in 3rd party services and give free subscriptions?

    Imagine, no spam, no telephone spam, no junk mail, no dialers.

    --
    #hostfile 0.0.0.0 primidi.com 0.0.0.0 www.primidi.com 0.0.0.0 radio.weblogs.com
  93. Rather a pain by klagermkii · · Score: 1

    If you're going to get tricked by this kind of trojan, you're probably aren't going to be the type that's bothered setting up to the optional password system, so for it to be effective it would have to be setup by default on ALL new modems. They would have to bar you from having it automatically "save" the password as well otherwise the trojan would be able to use it rendering it pointless.

    Would boycott this product real fast, I do like my linux box being able to connect to the internet by itself without my having to hold its hand...

    On the otherhand, what might be useful is to have the modem store a list of password-changeable "authorized numbers". I know I generally only use my modem to dial one ISP number, and occasionally a separate one if I'm overseas, so this could prevent some nasty surprises.

  94. progress by rozz · · Score: 1
    it is still possible to call to those countries with the operator assistance and the fees are waived. Now let's see if this nice idea will be followed by others.

    nice ideea indeed.
    international call 1920 - operator please connect me with country xxx number yyy
    international call 1990 - dial country xxx number yyy .. speak
    international call 2004 - operator please connect me with country xxx number yyy

    progress works in misterious ways!

    and whats more interesting, is that people blame MS for viruses & troians and such ... but for the dialers its not the fault of poor telco service, but the fault of poor countries.

    --
    "There is nothing more frightful than ignorance in action." Johann Wolfgang von Goethe
  95. Re:Password the Modem? Require User To Verify Call by Anonymous Coward · · Score: 0

    Use Linux. Problem solved. Seriously, though, at least use an external modem, so you can turn it off when you disconnect from the internet to prevent any such calls from being made. A problem, named "Dialguard," is good for user verification of phone calls, as you stated in your post.

  96. External ethernet dialers by Kirth+Gersen · · Score: 1

    Many posters seem to think nobody should be using POTS modems now anyway. However, I have several times installed ethernet/POTS interfaces, for these reasons:

    1. Sometimes the wideband fails

    2. It makes it easy to provide service to multiple machines

    3. You don't need to install any software or leave the account info on the hard disk (and all account info is in one place so if you change an ISP you only have to update one place)

    4. Some wideband adapters include a POTS port with builtin failover

    Such adapters are not supercheap, but how often have you set up a POTS interface this year and had to reconfigure a machine? Or several? What is your time worth?

  97. Educating the public by HerbieStone · · Score: 1
    Have you ever tried educating the public about anything?

    Educating the public is actually pretty easy. Just lie and tell them the government will be able to snoop around on their insecure browser with their insecure OS and will find out if they are speeding...

    sometimes I scare myself with my evil thoughts *sniker*

  98. Sasktel by Anonymous Coward · · Score: 0

    Sasktel, another major Canadian telco also does this, for the same reasons that Telus does. To me, it seems like a fairly safe way to protect customers while providing minimum hassle to people who actually want to call those countries.

  99. Re:Content carriers & an example of Guyana hij by Slashamatic · · Score: 1

    In some countries at least, the dialers are still using the special-rate services within the country. If a local telco is providing the service is can be held to be a direct party to the thing and they can withold fees from illegal activities. Given the misleading dialer consent stuff (and at one stage I fixed someone's computer that was hit by a dialer without any 'click' on license), it is relatively easy to complain to the telco.