Slashdot Mirror


CallerID Spoofing to be Made Illegal

MadJo writes "US Congress has just approved a bill that will make it illegal to spoof CallerID. From the bill: 'The amount of the forfeiture penalty (...) shall not exceed $10,000 for each violation, or 3 times that amount for each day of a continuing violation, except that the amount assessed for any continuing violation shall not exceed a total of $1,000,000 for any single act or failure to act.'"

54 of 351 comments (clear)

  1. Interesting by Travoltus · · Score: 3, Interesting

    That's a law that should be more proactive than reactive.

    How about an additional law that makes telephone companies responsible for allowing caller ID spoofing to happen?

    Or is that too difficult to prevent?

    --
    --- Grow a pair, liberals... stop letting the Republicans bully you!
    1. Re:Interesting by pete-classic · · Score: 3, Insightful

      Allowing subscriber lines to set caller ID data is a feature, not a bug.

      -Peter

    2. Re:Interesting by smartr · · Score: 5, Insightful

      If slashdot's comments and moderation can be abused, how is that a bug? Some features are inherently prone to different forms of abuse, and there is no magical way to completely solve the problem without removing the feature. I do not have faith in the idea that features can always have a perfect solution. If there was not a mistake in how something should function, it is not a bug. One could make improvements to make abuses harder, but this would be an improvement on the system - not a bug fix.

    3. Re:Interesting by bjoeg · · Score: 2, Insightful

      Linux has features that can be abused for illegal activities. So Linux' features must be bugs.

    4. Re:Interesting by Grendel70 · · Score: 5, Funny

      Feature: (n) - A bug with seniority.

      --
      Perhaps you mean a different thing than I do when you say "science."
  2. NannyState? by Sneakernets · · Score: 2, Interesting

    This isn't "NannyState" at all, this is an attempt at stopping scammers and other slimeballs from taking advantage of people.

    --
    "No freeman shall ever be debarred the use of arms." -- Thomas Jefferson
  3. Does this mean... by Ub3rT3Rr0R1St · · Score: 2

    Does this mean I won't be able to call my ex girlfriend up at 3am with a phone number she doesn't recognize, and proceed to breathe heavily into the phone?

    But seriously, I think it's a good idea. They've closed the door to many a tele-scammer. Hopefully now all those geriatrics who get their social security card stolen will have a little more security.

    1. Re:Does this mean... by Harmonious+Botch · · Score: 4, Funny

      Does this mean I won't be able to call my ex girlfriend up at 3am with a phone number she doesn't recognize, and proceed to breathe heavily into the phone? We gotcha covered. Post her number and the friendly folks here at slashdot will do it for you.
    2. Re:Does this mean... by prockcore · · Score: 4, Funny

      Nah, the real number is 202-456-1414 her name is Laura.

    3. Re:Does this mean... by cerberusss · · Score: 4, Funny

      Don't call this number, everyone! It's not his ex-girlfriend, it's his mother!

      --
      8 of 13 people found this answer helpful. Did you?
    4. Re:Does this mean... by WK2 · · Score: 2, Funny

      But seriously, I think it's a good idea. They've closed the door to many a tele-scammer.

      Yes. Because, as everyone knows, scammers will never break the law.

      --
      Write your own Choose Your Own Adventure. http://www.freegameengines.org/gamebook-engine/
  4. Simple question by TubeSteak · · Score: 3, Interesting

    When the police/people see the incoming phone records, will it show the spoofed number or the real number?

    --
    [Fuck Beta]
    o0t!
    1. Re:Simple question by Dun+Malg · · Score: 4, Informative

      When the police/people see the incoming phone records, will it show the spoofed number or the real number? Police and the phone company use the ANI system (Automatic Number Identification). This is the system that tracks your billing. You do not have any say in what this system records as far as Name, Number, etc. Caller ID is a separate and unrelated system. Caller ID information is usually set by the originating switch--- essentially the point where the call turns from analog to digital. If you get all your lines piped into your office via a T1, then you are in control of the device that sets the Caller ID name and number and can set it whatever you like.
      --
      If a job's not worth doing, it's not worth doing right.
    2. Re:Simple question by Rob+T+Firefly · · Score: 2, Interesting

      Police and the phone company use the ANI system (Automatic Number Identification). This is the system that tracks your billing. You do not have any say in what this system records as far as Name, Number, etc. Unless, of course, you spoof that as well.
  5. 3 times a day by sxeraverx · · Score: 2, Interesting

    So...If they get caught 3 times in one day, they can do it as much as they want that day? And...If they get caught 100 times, they can do it all they want forever? Fun.

  6. A campaign by ringokamens · · Score: 5, Informative

    There's a campaign going on at Binary Freedom right now that some of you may be interested in.
    http://binaryfreedom.info/node/163
    Basically, there are several arguments against this law

    1. It doesn't do anything
    Criminals will still make calls and spoof, so it won't stop fraud. Police can already track down spoofers with the same amount of non-spoofers who are using their phones for illegal purposes.

    2. It costs money
    We're gonna have to spend money to catch spoofers.

    3. Jurisdiction
    If the phone companies want to stop spoofing, they should design a secure system instead of relying on the congressional police

    4. Privacy
    It strips privacy that is gained by spoofing.

    5. Legitimate use
    It has legitimate uses such as for telecommuters who want the name when they make business calls to be the company's. Or how about a business that has several people using one phone line? They might want the sales associate's name to appear, which would be done through spoofing.

    Fact of the matter is, this gains us nothing. If I can write a fake name on a letter and mail it, why can't I do the same with my phone?

    1. Re:A campaign by Anonymous Coward · · Score: 5, Insightful

      I work for Congress, but not on this issue. But I can correct some misinformation.

      1. You're right. We shouldn't make murder illegal either.

      2. See number 1. The question is whether the money spent on this law is worth the societal good of making it easier to prosecute scammers.

      3. The phone companies don't have an incentive to stop scamming. Congress does (they're occasionally responsible to voters.)

      4. It doesn't stop you from not allowing the number to show up at all. It just stops you from faking it.

      5. It was specifically written to exempt these uses, since Congressional offices, for example, have the public number show up when people call out from them, rather than individual extensions.

    2. Re:A campaign by Elemenope · · Score: 2, Informative

      Fraud generally requires either a pecuniary motive, or commission of the act in furtherance of some other crime. Simply putting some name that is not my own on a letter is neither of these things. I could sign my letters "Harry Potter" and the name as such wouldn't even be impersonation because the "victim" doesn't exist. Is this Mail Fraud? I don't think so...unless I was attempting to somehow profit from putting "Harry Potter" as my name.

      --
      All the techniques ever used to make men moral have been themselves thoroughly immoral... (Nietzsche)
    3. Re:A campaign by Khaed · · Score: 5, Insightful

      I'm not so much worried about criminals, but I don't think this bill addresses what I want it to:

      I'm sick of companies calling and their damn name not showing up, for whatever reason. "Tollfree number" (well no shit, other than collect, when do I get charged for receiving calls?) or "Unknown Caller"

      Some of them are bill collectors. Who want someone that isn't here, and don't seem to want to believe that no, that person isn't here, and isn't going to be, so stop calling me. But either way, if they can't identify themselves, they shouldn't be calling my damn number. Which is why I disagree with #4 on your list.

      If you're calling my house, I have every right to know who you are. Can you seriously come up with a legitimate situation where you should be able to call me and me not be able to see who you are before I answer the phone?

      I barely answer unless I recognize the number anyway, because of a massive amount of wrong numbers. And some of the numbers these idiots are trying to dial aren't even close.

      I agree with #3, however, in regards to #2, the cost of it will just be passed on to you one way or another. #5 I can see, but I've never had a business call me and use a sales associate's name.

      #1 is a silly argument. Making rape illegal hasn't stopped it, either. You can make the case that no law is ever going to stop any crime. However, it makes it so that if you do it and get caught, you can be punished.

    4. Re:A campaign by gujo-odori · · Score: 3, Insightful

      WRT point 5, what the bill outlaws is "to transmit misleading or inaccurate caller ID information." If a company has its PBX configured so that it sends a salesperson's name rather than the company's name when she makes a call, I think a lawyer would have no problem deflecting an attempt to prosecute. After all, the name displayed *was* the name of the person making the call, so none of the information was false or misleading.

      For the person who wondered if having his caller ID say "Harry Potter" could get him in trouble, it sounds like it could, although in practical terms I think someone would have to actually complain about that for him to get in trouble. I think how this law will be used in practice is for "piling on" charges when arresting scammers on other charges. The more you can charge them with, the more expensive it is for them to defend it and the more jail time and fines you can get on them.

      Still, as others have suggested, I believe congress is approaching this from the wrong angle. It is certainly possible for the Telcos to solve this problem by preventing spoofing in the first place, but they don't because they have no incentive to do so. They also have some disincentive to do so: there are people who want to spoof, for good reasons or bad, and these people are telco customers. If the major telcos all blocked spoofing, they'd take their business to someone who didn't. However, congress can give telcos incentive to block spoofing by requiring them to do so and levying hefty fines if they don't.

      They'll whine, sure. Companies that don't want to do something always whine. Look at the auto industry. Going back to the first legislation requiring emission controls, and later, CAFE imposing mileage standards, there was much lobbying, whining, wringing of hands, wailing, gnashing of teeth, and protestations that it was too difficult, to expensive, or both. Yet, lo and behold, they've done a pretty fine job of meeting these requirements. In doing so, they illustrated very well the difference between "can't' and "don't want to." The telcos would be no different. They'd gripe about it, but they'd get it done.

    5. Re:A campaign by Achromatic1978 · · Score: 4, Informative
      "Can I have your mailing address?"

      Certified mail:

      In reference to your repeated attempts to find Person X on phone number X, consider yourself formally informed that this person has no connection with this number, and further, that this number is a cellular service for which an uninvolved third party is billed for each call from your business. Accordingly, you are instructed to cease and desist calling this number in relation to this matter, or I reserve the right to take action on the grounds that these calls are civil harassment, and to seek redress through appropriate channels for costs and damages incurred in dealing with this matter."
    6. Re:A campaign by Short+Circuit · · Score: 2, Insightful

      Nope. Once a pseudonym can be associated with you, all records associated with that pseudonym can, as well. The only way a pseudonym can give you privacy is if you use a different one every time.

      Want true privacy? Achieve anonymity.

    7. Re:A campaign by Dachannien · · Score: 2, Insightful

      If you don't want the number you're calling from to show up on my caller ID, then don't call me. Problem solved.

  7. Congress isn't allowed to do this... by SonicSpike · · Score: 3, Insightful

    According to the Constitution in Article 1, Section 8, Congress isn't allowed to regulate communications. Therefore this is unconstitutional.

    --
    Libertas in infinitum
  8. That's kinda funny... by sokoban · · Score: 3, Interesting

    Well, around here the police department spoofs their caller ID info. Any time you get a call from anyone at the police station downtown, it only shows four zeros as the caller ID. It is different from when it says ID unavailable.

    --
    09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0 is the magic number.
  9. Okay, what about calling cards? by xerxesVII · · Score: 3, Interesting

    My parents insist on using a calling card. When they call me, what comes up in my caller ID is the city where whatever bank they got sorted through is located. For instance, my caller ID will show some 1-800 number and say "MONTGOMERY, AL" or some such city. Would this fall under spoofing?

    --
    "We shall grapple with the ineffable, and see if we may not eff it after all." - Douglas Adams
  10. Fines in America - just can't figure it out by Bombula · · Score: 5, Interesting
    I don't get why in America we can't figure out that fines only work when the penalty is commensurate with the infraction. If you want fines to work, you have to do what they do in Scandinavian countries - charge a percentage of your income. What is a $500 parking ticket for a billionaire? But $500 will ruin your life if you work for minimum wage. It's not fair, it's not just, and it doesn't work.

    Fines for corporations should certainly have a minimum value, but they should have NO upper ceiling. When companies like Microsoft or Phillip Morris or ExxonMobil are fined $200 million dollars - as most of them have been - they don't even blink. It's completely useless. The law in America in this regard is completely idiotic in this regard.

    --
    A-Bomb
    1. Re:Fines in America - just can't figure it out by profplump · · Score: 3, Interesting

      So fines against people don't have a minimum but fines against companies do? What if your $1M minimum fine puts 10 people out of work because the company goes under? Either using a sliding scale or don't; let's not make up silly rules based on angst against "evil corporations".

  11. My Other Me by Doc+Ruby · · Score: 2, Insightful

    If I send my landline phone# from my mobile phone, is that "illegal spoofing"?

    --

    --
    make install -not war

  12. All For It by Bios_Hakr · · Score: 3, Funny

    Good, now I'll stop getting cold calls from "caller unknown". If my phone displays "caller unknown", I just made $10k.

    --
    I'd rather you do it wrong, than for me to have to do it at all.
    1. Re:All For It by Kalriath · · Score: 2, Informative

      Informative? Hah.

      No, intentionally blocking is not forging caller ID. If your phone displays "Caller Unknown", you just made $0

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
  13. Actually, nothing happened by gruntled · · Score: 5, Informative

    So I'm actually reading the legislative action on this bill (through Thomas, provided by the link), and it doesn't appear as though there's been any kind of a vote on this. Am I, you know, missing something? Or does somebody not understand that a bill actually has to be voted on by each full chamber (both the House and the Senate) in an identical format, before it can be said that "Congress" has approved anything?

  14. You insensitive clod! I don't have CallerID! by NotQuiteReal · · Score: 2, Interesting
    I don't have caller ID! Why would I? If I don't want to answer the phone, I don't. (Actually, my wife probably will answer it anyhow, she is kind of type-A that way. But still, I have no problem putting undesirable callers on hold "forever", I am kind of an A-Hole, that way.)


    I have saved hundreds and hundreds of dollars over the years for a feature I could have used maybe, once or twice.


    Seems like a bargain to me.


    Sheesh, you don't have to buy product offered to you.


    I am not a technophobe, I have two land lines and four cell phones. The Cell phones come with caller ID "for free".

    --
    This issue is a bit more complicated than you think.
    1. Re:You insensitive clod! I don't have CallerID! by ScrewMaster · · Score: 2, Insightful

      True enough, I suppose ... but given that most phone companies bundle services you often end up with Caller ID whether you want it or not.

      --
      The higher the technology, the sharper that two-edged sword.
  15. Upside-down. by node+3 · · Score: 4, Funny

    Leave it to Slashdot to predictably label fraud as a "feature" and laws designed to prevent it "nannystate".

    1. Re:Upside-down. by aztektum · · Score: 4, Insightful

      That's the damn thing. Last I checked we already had laws against fraud. So why make a law specifically towards something like this? I can understand the disabilities act, but really, go after spoofers for fraud and if the penalty isn't high enough ADJUST the penalty for fraud across the board. We're making every damn little thing a frickin' crime in this country anymore.

      --
      :: aztek ::
      No sig for you!!
    2. Re:Upside-down. by oGMo · · Score: 2, Insightful

      Leave it to someone who doesn't know what they're talking about to determine what should be considered "fraud". Do you implement the evil bit? I hear it's supposed to prevent hackers and fraud and all that...

      --

      Don't think of it as a flame---it's more like an argument that does 3d6 fire damage

    3. Re:Upside-down. by SpaceLifeForm · · Score: 3, Insightful

      The reason they make a law like this is to
      limit the liability. It's a fixed amount.

      That is the number one reason laws have no teeth,
      they have fixed monetary penalties, that are
      really no penalty to big business. They are
      just a cost of doing business to the business.

      --
      You are being MICROattacked, from various angles, in a SOFT manner.
    4. Re:Upside-down. by node+3 · · Score: 4, Insightful

      Last I checked we already had laws against fraud. So why make a law specifically towards something like this? Because one size does not fit all.

      Should impersonating a police officer, identity theft, false advertising and passing fake checks all have the same punishment? These are all, at the base, fraud. Could they even reasonably fit under one singular law?

      We're making every damn little thing a frickin' crime in this country anymore. Here's the thing, the general term "fraud" is not illegal. Only specific forms of fraud. For example, claiming you can bench 200 lbs when you can barely press half that is not illegal. So, instead of just making "fraud" illegal, laws target specific types, and they *define* those specific types. Caller ID spoofing probably doesn't fall into any existing category of fraud, so this form of fraud can be presently engaged in with impunity.

      So what choices are there? Basically, they are to expand an existing law to cover Caller ID spoofing, create a new law, or ignore it altogether. Ergo this story.
    5. Re:Upside-down. by shaitand · · Score: 2, Interesting

      'claiming you can bench 200 lbs when you can barely press half that is not illegal'

      Yup, and its not fraud. Lying and fraud are NOT synonymous. A Fraud is a deception deliberately practiced in order to secure unfair or unlawful gain. Deception in and of itself is neither fraud nor illegal.

      'Should impersonating a police officer, identity theft, false advertising and passing fake checks all have the same punishment?'

      Ummm... yes? Of course some of those things would be done for the purpose of accomplishing other crimes and that is where additional charges come in. There are also penalty ranges for crimes so that a judge can look at the specific offense. The more severe offenses like false advertising should actually carry multiple charges of fraud.

      In any case, any law which makes a tool illegal rather than bad actions performed with the tool is a bad law.

      'Caller ID spoofing probably doesn't fall into any existing category of fraud, so this form of fraud can be presently engaged in with impunity.'

      That's because caller id spoofing ISN'T fraud it is a harmless deception. If you use that deception to illicit an unfair gain then you have committed fraud and would have committed a criminal act without this law.

    6. Re:Upside-down. by node+3 · · Score: 3, Insightful

      Yup, and its not fraud. Lying and fraud are NOT synonymous. Yes, they are. You can't stop at the first definition in your dictionary. Fraud does not require financial gain as a component (even if it's usually the case, and is part of the first definition in your dictionary).

      Ummm... yes? Impersonating a cop gives you power over others you don't deserve. That's a very different crime than stealing someone's identity, or committing bank fraud, which are financial, and those two have very different effects on two very different targets. If you think these should all be equally punished, you are a sociopath.

      You claim that the secondary crime should be the differentiator. I say merely *impersonating* a cop should be illegal, not just as some generic "fraud", but because it's an attempt to gain general power one doesn't have the right to, even if no other crime is committed. Merely stealing an identity, even if you don't commit any other crime, should be illegal, and have a different punishment, and writing a bad check should be illegal as well, etc.

      In any case, any law which makes a tool illegal rather than bad actions performed with the tool is a bad law. Then you have no problem whatsoever with your neighbor (not necessarily your existing neighbor, but any neighbor you may ever have, by choice or not) owning a nuclear bomb? Sarin gas? Or someone keeping dynamite in an apartment building?

      The fact is, some tools *should* be illegal or severely restricted. Your sentiment goes too far, it goes from cases where it's true (in general, outlawing a tool *is* foolish), and applies it too broadly (to say outlawing a tool is *always* bad).

      That's because caller id spoofing ISN'T fraud it is a harmless deception. If you use that deception to illicit an unfair gain then you have committed fraud and would have committed a criminal act without this law. Are you certain of that? Laws are specific things (they have to be), and if Caller ID spoofing does not fall under a current law, then it *won't* necessarily be illegal, even if it is fraud (the money kind you seem to think is the only kind).

      For example, calls pretending to be from the DNC, which are really from the RNC (this happened during the 2004 election, although I do not know if Caller ID spoofing was involved) had nothing to do, directly (i.e., legally) with money, and instead had to do with political influence.

      Is that harmless?
    7. Re:Upside-down. by Opportunist · · Score: 2, Interesting

      That's why fines in some countries are not set at a specific sum (at least when it comes to amounts > 100 bucks), but rather to "day rates". A day rate is what the person or organisation found guilty earns per day. This is, in case of a person, 1/360th of your annual income (or revenue in case of a company).

      So you see in our laws things like a fine of "up to 90 day rates" or "up to 360 day rates" rather than any specific amount. Usually the equivalent prison sentence is exactly the amount of day rates (i.e. laws usually read "up to 1 year prison or 360 day rates"). The downside is that it seems that some poor guy seems to be getting off "easy" when he's fined for 5k bucks for a crime that would've earned him a year in prison, simply because 5k is what he makes in a full year.

      Personally, I think it's way fairer than a fixed amount (a 20k fine would be hard for me to pay but for many it would break their neck, and for some it would be pocket change). Still not a perfectly fair system, but a lot fairer.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    8. Re:Upside-down. by morari · · Score: 2, Insightful

      Impersonating a cop gives you power over others you don't deserve. Being a cop gives you power over others you don't deserve!
      --
      "He who can destroy a thing, controls a thing." --Paul Atreides, Dune
    9. Re:Upside-down. by Si · · Score: 2, Insightful

      Yup, and its not fraud. Lying and fraud are NOT synonymous. Yes, they are. You can't stop at the first definition in your dictionary. Fraud does not require financial gain as a component (even if it's usually the case, and is part of the first definition in your dictionary). But just maybe the dictionary does not define the law. Try a legal dictionary.

      Ummm... yes? Impersonating a cop gives you power over others you don't deserve. That's a very different crime than stealing someone's identity, or committing bank fraud, which are financial, and those two have very different effects on two very different targets. If you think these should all be equally punished, you are a sociopath. So strippers who dress as cops have power over others they don't deserve? Be careful of blanket statements, for they make you look more of a fool than you clearly are.

      You claim that the secondary crime should be the differentiator. I say merely *impersonating* a cop should be illegal, not just as some generic "fraud", but because it's an attempt to gain general power one doesn't have the right to, even if no other crime is committed. Merely stealing an identity, even if you don't commit any other crime, should be illegal, and have a different punishment, and writing a bad check should be illegal as well, etc. the secondary crime *is* the crime.

      In any case, any law which makes a tool illegal rather than bad actions performed with the tool is a bad law. Then you have no problem whatsoever with your neighbor (not necessarily your existing neighbor, but any neighbor you may ever have, by choice or not) owning a nuclear bomb? Sarin gas? Or someone keeping dynamite in an apartment building? To make such statements again shows your foolishness. To outlaw the possession of dynamite in a residential area is quite different from outlawing the ownership of dynamite.

      The fact is, some tools *should* be illegal or severely restricted. Your sentiment goes too far, it goes from cases where it's true (in general, outlawing a tool *is* foolish), and applies it too broadly (to say outlawing a tool is *always* bad). Outlawing a tool *is* always bad - tools exist to help mankind (why they're called tools, not useless pieces of junk). Outlawing a hammer because it can be used to commit murder is ridiculous.

      That's because caller id spoofing ISN'T fraud it is a harmless deception. If you use that deception to illicit an unfair gain then you have committed fraud and would have committed a criminal act without this law. Are you certain of that? Laws are specific things (they have to be), and if Caller ID spoofing does not fall under a current law, then it *won't* necessarily be illegal, even if it is fraud (the money kind you seem to think is the only kind). Go look up fraud in a *legal* dictionary and then re-read your statements.

      For example, calls pretending to be from the DNC, which are really from the RNC (this happened during the 2004 election, although I do not know if Caller ID spoofing was involved) had nothing to do, directly (i.e., legally) with money, and instead had to do with political influence.

      Is that harmless? What makes you think a direct connection has to be made for something to be legally about money? What makes you think that all crimes have to concern money? The case to which you are alluding was about influence - the gain was from the lie, not from the use of caller ID to achieve it. The same effect could have been had if the caller had said "Hi, This is John Doe from the DNC" in the absence of caller ID. In many cases (at least until recently) the law is concerned with intent, not means. Murdering someone with a knife carries no less a penalty than shooting them, absent any other qualifiers, and in fact no distinction is made except between degrees of intent.
      --


      Why is it that many people who claim to support standards have such atrocious spelling and grammar?
    10. Re:Upside-down. by shaitand · · Score: 2, Interesting

      'Asterisk does a great job of keeping unwanted calls off my home line, but to work best it needs valid callerID info.'

      I'm sorry but there is no justification for creating a new law and a new class of crime so that your Asterisk system will work.

      That said, I think there might be merit in requiring telemarketers, pollsters, and collection agencies to use valid callerid information. I don't support it for other commercial agencies though, some may not take incoming calls at all.

      That actually touches on me personally. I own a small computer service business. Much to my customers glee I do not give out my cell phone number to customers (they would rather have you paying attention to them and their problem when you are there than be able to reach you directly). If there is an emergency then they can pass a message from the office. My cell phone does not have the option of spoofing the callerid to match the office number it only gives me the option of setting callid to private. My cell is paid for by the company and used for business so it would fall under your commercial entity bill, this would effectively bar me from calling customers at all.

      'There is no VALID reason for companies to be "anonymous".'

      Aside from the specific example I mentioned above, this is a broad statement and you should rethink it. I could as easily say that there is no VALID reason for YOU to be "anonymous". Companies are entitled to the same privacy you are and may have many reasons for wanting to be anonymous.

      I say we leave the line where it was BEFORE this bill. Spoofing caller ID or using any other means of deception to illicit unlawful gains is illegal (that would include businesses using caller id in a way that is not valid). Using caller id spoofing for any other action that is not criminal is still not criminal.

      'I received about 50 calls for "Patricia" in the past year. despite constantly telling these annoying people that there has never been a "Patricia" at this number in at least 15 years since I've had it, and to remove the number from their records, and asking to have the info relayed to the creditor, the calls still keep coming.'

      It's all about the magic words. There are different ways you have to say it depending on who is calling but here is a universal statement that will work for ANYONE you don't want to call again:

      "This is my phone. I have no existing business relationship that entitles you to call it. Do not call again."

      or if it is just telemarketers or people calling for surveys you can shorten it to "Do not call again."

      If you say anything else it doesn't carry the weight of law, if you say it the way I just said it carries a $50,000 fine per incident should the same company call you again. The law doesn't require them to 'notify creditors' or 'take you off their list' but it does require them to honor your specific request that they not call again UNLESS you have an existing business relationship.

      Speaking of things that should be regulated, collection agencies should be limited to one collection attempt every 3 months. I had a roommate once who got over his head and could no longer both pay rent/food AND pay is credit card bill. After it was turned into collections the creditors for ONE card literally called on a daily basis and sometimes multiple times per day.

  16. Re:How will they enforce this? by Anonymous Coward · · Score: 3, Informative

    There are several services out there that will do this real-time before you even answer the call. Like PDXUSA, they compare the ANI with the ID of the carrier originating the call, and the CID to see if they are consistent, then the CID display on your phone will indicate the CID, the ANI, and indicate if the CID is legit or not.

  17. Interstate calls ARE interstate commerce by davidwr · · Score: 2, Insightful

    If you call someone in another state and the phone company gets paid for the call, it's interstate commerce.

    If any of the phone companies involved are incorporated in another state, then it's also interstate commerce.

    As far as the feds are concerned, the parties to the commerce are the people using the phones, all the carriers, and anyone and everyone who is paying the bill.

    You can argue that the feds have no business regulating intra-state phone calls. It's been at least 70 years since the feds started regulating the phone system. I'd be surprised if the courts haven't ruled on federal regulation of purely intra-state phone calls yet.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
  18. The whole thing is absurd by StealthyRoid · · Score: 3, Insightful
    It's a stupid bill for four reasons:
    1. It's a solution without a problem. The actual impact of caller ID spoofing is almost nil, while it's a valuable learning tool for many people just getting started with phones. The only argument I can see for it is that it makes reporting violators of the Do Not Call list. However a.) that's not a big enough benefit to justify any but the smallest trade off and b.) the Do Not Call list is stupid, and its impact should be achieved via implementation of blacklists by phone carriers. The government shouldn't be acting unless there's a serious matter at hand, nor should it engage in yet another unConstitutional regulation.
    2. It's too open-ended.

      `(4) REPORT- Not later than 6 months after the enactment of this subsection, the Commission shall report to Congress whether additional legislation is necessary to prohibit the provision of inaccurate caller identification information in technologies that are successor or replacement technologies to telecommunications service or IP-enabled voice service.
      ...
      `(A) CALLER IDENTIFICATION INFORMATION- The term `caller identification information' means information provided by a caller identification service regarding the telephone number of, or other information regarding the origination of, a call made using a telecommunications service or IP-enabled voice service.
      Why not apply this to IP-spoofed or proxy'd Ventrilio/TeamSpeak/etc... conversation? This only increases the Constitutional argument against this amendment, because even if you buy the absurd assertion that the commerce clause gives the USFG power over anything that even remotely involves interstate commerce, where's the commerce in a private Teamspeak server? It also increases the chances of abuse by law enforcement, like the kids above.
    3. The bill doesn't just restrict malicious spoofing, like making a threatening phone call look like it's coming from inside the house, it restricts simply playful spoofing, like ordering a pizza for I.P. Freely and making it look like comes from the local police precinct. Nor does it make a distinction between spoofed info that represents someone else's information accurately, and displaying non-existent information like '555-555-1212'. There's no reason the government should be spending my tax dollars on something as asinine as this. Osama bin Laden isn't calling up the White House and asking for Prince Albert in a Can while spoofing his CID to say "SUCK IT DRY".
    4. The fines are absurdly out of proportion with any _potential harm_ presented by caller ID spoofers. What incentive does the USFG or the states (which the bill empowers to act on these matters) have to NOT go after 14 year old kids for $10k a pop? None. But nobody will think that at first, until the first few kids get busted, and are we really OK with _anyone_ being jacked by something this stupid?
  19. I call BS by Strange+Ranger · · Score: 2, Insightful


    My real name is not Strange Ranger.

    Why should I have to reveal my real number when placing a call?

    Yes I know this is a forum and calls are more "personal".
    But sometimes I call companies. Or heck maybe city hall.
    Where does the tracking and ID'ing end?

    --

    Operator, give me the number for 911!
  20. Nice by rantingkitten · · Score: 3, Interesting

    I sort of hope it passes, for selfish reasons. I direct the support department at a VoIP provider and I cannot tell you how tired I am of people's endless, nonstop whining about their caller ID, and how they want it changed, and why can't I make it look like they're calling from somewhere else... on and on and on. This will give me a convenient excuse to tell them to shut up.

    On a slightly more serious note, though, it's amusing to note why the bill is being introduced. Senator Stevens was blithering about how it's important because people rely on caller ID for "critical information". I cannot imagine what could possibly be considered "critical" about caller ID information, particularly considering what a half-assed hack the entire system is anyway and the lack of any real standards. Please note that caller ID is entirely different from ANI (automated number identification).

    Caller ID is a fine example of a semi-convenient feature that people took and ran away with. The general population now sees Caller ID as the Oracle at Delphi, infallable and impossible to live without, and go absolutely apeshit if it's wrong (which is quite often, believe it or not). I guess people just don't understand the technology, but to "rely" on caller ID information is ludicrous.

    I remember about fifteen years ago, maybe a bit more, when Caller ID was virtually unheard of, and the Bells were just starting to roll it out to homes. My parents got the little box from Radio Shack, signed up with the service, and my friends and I would rush over to the ID box with childish glee every time the phone rang, cause hey! How cool is this, man!

    But in the end that's all we thought about it. It was a cool little novelty. That people take it so seriously now baffles me.

    We used to deal with the phone ringing and not knowing who it was in advance with the following method: a) answer the phone, b) don't answer the phone, or c) let them leave a message and get back to them if we feel like it.

    Somehow, though, what I don't remember is that the pre-Caller ID era was some kind of a Dark Ages where nobody got anything done.

    But you'll never convince the public of this.

    --
    mirrorshades radio -- darkwave, industrial, futurepop, ebm.
  21. Re:DEATH TO "UNKNOWN CALLER" by Lumpy · · Score: 3, Interesting

    I block it just fine on verizon.

    I have all phone lines and voip lines going into a asterisk server. if you dont have a real caller Id string and are not on my blacklist your call goes through.

    It's quite easy to block UNKNOWN CALLER. and cheap too. a asterisc pots card is $29.00 on ebay and an asterisk server is pretty much free. (P-III 500 is more than enough horsepower) all you need is a voip phone handset or adapter to go to regular phone ($19.00 ebay sipura spa-2000)

    Way better than any answering machine you can buy, I can block anything I want, I can force unknown callers to a special mailbox that states " I do not answer unknown calls" or better yet a 30 minute "hello? hello? I cant hear you. wait a second. can you hear me now? hello? can you speak louder? I can kind of hear you now, what was that?"

    wasting a telemarketers time is a wonderful thing. when they get that you are honey potting them to waste their time they add your number to the do not call list on their own.

    --
    Do not look at laser with remaining good eye.
  22. Sorry, no by Jeff+Molby · · Score: 2, Insightful

    5. It was specifically written to exempt these uses
    ...because governments tend to be very good at predicting and allowing for all of the possible "legitimate" uses.

    2. See number 1. The question is whether the money spent on this law is worth the societal good of making it easier to prosecute scammers.

    No, use apples and apples. The societal good must outweigh the societal cost, not merely the dollar cost. Societal costs include:

    - The additional liability of every single person and business subject to the law
    - The opportunity cost of inventors who might be able to devise beneficial uses of a banned practice.
    - The general deterioration of faith and understanding of the government due to the addition of yet another unnecessary law. (Yes, I can say for a fact that it is unnecessary because, well, we've survived without it for quite some time)

    I'm sure you can think of a few more hidden costs if you take a couple minutes.
  23. It's all Paris Hilton's fault... by tom_evil · · Score: 2, Interesting

    ...or is it just a coincidence that this law comes up after "SpoofCard.com Terminates Accounts of Paris Hilton and 50 Other Customers for Using its Service to Break Into Voicemail Boxes"?

    I think not.

    Anyway, please people, the whole reason for this law is not to make spoofing a thing of the past, but to make sure only cops and feds are allowed to spoof caller ID to harass, intimidate and spy on me by pretending to be my loved ones, creditors, ex-girlfriends who want their DVDs back, one night stands who I never called back, etc. I mean, how naive are we about them spying on me? Laws are about power and who has it. That's why they won't let me buy a tank on eBay.

    Damn government.

    --
    i am the opposite of tom_good, i am the XOR of ]=9fÆ"ÝÕ and ÖÆ\KF, i am 746F6D5F6576696C00.
  24. The US System Works by Slashdot+Parent · · Score: 2, Interesting
    That's why in America we have three types of penalties: monetary, incarceration, and administrative.
    • Monetary: That's the fines. To somebody like Paris Hilton, the fine means nothing. In fact, to most people, the amount of the fine is trivial. In my state, the fine for speeding is $5 for each MPH over the speed limit. If I get a ticket for going 45 MPH in a 25 MPH zone, my fine is $100.

      $100 means nothing to me. If I were to lose $100 walking down the street, I would never even notice. So why do I not just drive like a maniac? Read on...
    • Administrative: If you get too many tickets within a certain period of time, you lose your right to drive. They take your license away. It doesn't matter if you are rich or poor. You get too many tickets, you lose your license. Just ask Paris Hilton.
    • Incarceration: Drive without a license? You're going to jail. Doesn't matter if your are Paris Hilton or some bum on the street. Hell, in my state, you'll get jail time for serious enough speeding infractions. Even if you can afford the $5 for each mile ticket, if you're caught going 120 in a 55 MPH zone, you're going to jail. Doesn't matter if you can afford a $325 ticket or not.
    Doing a percentage scale for tickets is just stupid. In Sweden, a speeding fine is calculated at 14 days pay. Would you really miss 14 days pay no matter what you earned?

    What about if you earned $500,000 per year? Your fine would be $19230.76. But if you earned $500k/yr, would you really care that much about a $20k fine? Jail time and loss of license are much bigger deterrents to the wealthy.
    --
    They don't grade fathers, but if your daughter's a stripper, you fucked up. --Chris Rock