US House Passes Ban On Caller ID Spoofing

smarek writes "The 'Truth in Caller ID Act' passed the US House of Representatives on Wednesday. The legislation is trying to outlaw Caller ID spoofing. In some cases, this spoofing has led to individuals giving out information that has led to identity theft. Last year the NYPD discovered over 6,000 victims of Caller ID spoofing, who together lost a total of $15 million. A companion bill has already been passed by the Senate, and the two are on their way to 'informal conference to reconcile any differences.' The bill that results will most likely pass." PCWorld's coverage notes that callers will still be able to block their information entirely, and that the bill may have negative consequences for legitimate phone-related services, such as Google Voice.

Comments

Yet another legal solution to a technical problem

[bcmm]

People who steal identities will carry on spoofing caller ID, because they already commit more serious crimes, while users of legitimate services will be inconvenienced. Still, at least the politicians are seen to do something about the problem.

If Congress legislates Email From: headers...

[Anonymous Coward]

And if Congress legislates that in all email messages, the "From:" headers cannot be forged, THAT will stop SPAM. I'm certain of it. Just like this will stop caller ID spoofing.

This will show the wrascally criminals

[exabrial]

Clearly, this is the correct solution and will whip those wrascally criminals into shape. There isn't anything this congress can't do!

Re:Yet another legal solution to a technical probl

[causality]

People who steal identities will carry on spoofing caller ID, because they already commit more serious crimes, while users of legitimate services will be inconvenienced. Still, at least the politicians are seen to do something about the problem.

If they really wanted to do something about this, they'd discontinue the entire CallerID system and allow regular folks to use ANI as a standard feature. That's the same system used by both toll-free numbers and emergency services like 911. Unlike CallerID, it's out-of-band and cannot be spoofed by the caller alone. It uses the billing data, the same data that the phone company uses to know whom to charge for the call. By comparison CallerID is a joke.

Of course a lot of the ID theft issues would be greatly reduced if people would use a little sense. That would include never giving confidental information to someone who calls you. If you think that's your bank calling about your account, tell them you are going to hang up and call them back at the number they publish in the phone book or your hardcopy account statements. This simple 20-second step would eliminate a great deal of these problems, no politicians required.