Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Adam Hart
Chris Foster wrote: The Register is carrying a article written by Kevin Poulsen of Securtiy Focus, calling asterisk "..the most powerful tool for manipulating and accessing CPN data.." http://www.theregister.co.uk/2004/07/07/hackers_gut_voip/ I hope NuFone doesn't drop asterisk-set-able callerid

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Andrew Thompson
Adam Hart wrote: > These kind of things will be reason (excuse) for Voip to be regulated The sad part is, it's like Gun control. The people who could be the most dangerous will simply skip the public system. If I want a gun for something illegitimate, I steal it, or buy it from someone on a back

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Kevin Walsh
Adam Hart [EMAIL PROTECTED] wrote: > Chris Foster wrote: > > The Register is carrying a article written by Kevin Poulsen of > > Securtiy Focus, calling asterisk "..the most powerful tool for > > manipulating and accessing CPN data.." > > > > I hope NuFone doesn't drop asterisk-set-able callerid's

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Jeremy McNamara
Chris Foster wrote: The Register is carrying a article written by Kevin Poulsen of Securtiy Focus, calling asterisk "..the most powerful tool for manipulating and accessing CPN data.." http://www.theregister.co.uk/2004/07/07/hackers_gut_voip/ I hope NuFone doesn't drop asterisk-set-able callerid

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Jeremy McNamara
Chris Foster wrote: The Register is carrying a article written by Kevin Poulsen of Securtiy Focus, calling asterisk "..the most powerful tool for manipulating and accessing CPN data.." http://www.theregister.co.uk/2004/07/07/hackers_gut_voip/ I hope NuFone doesn't drop asterisk-set-able callerid

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Steve Totaro
why regulate? nobody regulates the return address on a letter sent via USPS. - Original Message - From: "Kevin Walsh" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, July 07, 2004 10:00 AM Subject: RE: [Asterisk-Users] VoIP hackers gut Caller I

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread rich allen
this is really simple, companies like Nortel, Lucent need to change their code for caller id, if the number should be blocked then dont transmit it to the far end switch - hcir On Jul 7, 2004, at 6:00 AM, Kevin Walsh wrote: Adam Hart [EMAIL PROTECTED] wrote: Chris Foster wrote: The Register is c

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Timothy R. McKee
. McKee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Walsh Sent: Wednesday, July 07, 2004 10:01 To: [EMAIL PROTECTED] Subject: RE: [Asterisk-Users] VoIP hackers gut Caller ID Adam Hart [EMAIL PROTECTED] wrote: > Chris Foster wrote: > > The Re

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread brian
> To: [EMAIL PROTECTED] > Subject: RE: [Asterisk-Users] VoIP hackers gut Caller ID > > Adam Hart [EMAIL PROTECTED] wrote: > > Chris Foster wrote: > > > The Register is carrying a article written by Kevin Poulsen of > > > Securtiy Focus, calling asterisk "..the mo

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Stefan de Konink
MCI definately does this. We tryed out a sample to replace our CallerID with the one we forwarded. Did not work :( otherwise it was really cool. But I can imagine if someone talks SS7 noone could 'touch' them, or isn't that true? Stefan On Wed, 7 Jul 2004, Kevin Walsh wrote: > Adam Hart [EMAIL

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Brancaleoni Matteo
hi... here in Italy is almost impossible to set an invalid cid, if is out of your allowed space. ie. if you have X numbers on your PRI, you can only set one of these. nothing more. on bri you simply cannot do nothing. just my 2 cents. -- Brancaleoni Matteo <[EMAIL PROTECTED]> Espia Srl ___

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Dameon D. Welch-Abernathy
On Wed, 2004-07-07 at 05:29, Chris Foster wrote: > I hope NuFone doesn't drop asterisk-set-able callerid's after this > article; i've been wanting that feature from voicepluse for a long > time. My VoicePulse Connect line allows you to set Caller ID. -- PhoneBoy

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Scott Laird
On Jul 7, 2004, at 7:00 AM, Kevin Walsh wrote: Perhaps service providers who allow the Caller*ID to be set should insist that customers provide evidence that they own the phone numbers that they want to publish, and then limit the customers' choices to only the numbers in their approved list. Call

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Steve Totaro
I liked the "NuFone chief Jeremy McNamara didn't return phone calls for this story."line. ;-) - Original Message - From: "Jeremy McNamara" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, July 07, 2004 11:45 AM Subject: Re: [Aster

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread William Suffill
Just asking for abuse though unless it is restricted or grounds for termination without a refund, People prefer to set their CID to a proper call back number such as myself but it has can be used for less positive uses. On Wed, 07 Jul 2004 11:45:48 -0400, Jeremy McNamara <[EMAIL PROTECTED]> wrot

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread brian
PROTECTED] > Subject: Re: [Asterisk-Users] VoIP hackers gut Caller ID > > Chris Foster wrote: > > > The Register is carrying a article written by Kevin Poulsen of > > Securtiy Focus, calling asterisk "..the most powerful tool for > > manipulating and accessing CPN

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Andrew Thompson
rich allen wrote: > this is really simple, companies like Nortel, Lucent need to change > their code for caller id, if the number should be blocked then dont > transmit it to the far end switch Actually, it wouldn't surprise me if the options for this were already implemented. But, that's nothing

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread David Boyd
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Timothy R. > McKee > Sent: Wednesday, July 07, 2004 11:58 AM > To: [EMAIL PROTECTED] > Subject: RE: [Asterisk-Users] VoIP hackers gut Caller ID > > > This has always been o

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Steve Kennedy
On Wed, Jul 07, 2004 at 07:57:36AM -0800, rich allen wrote: > this is really simple, companies like Nortel, Lucent need to change > their code for caller id, if the number should be blocked then dont > transmit it to the far end switch Err, not quite right. There are a few circumstances when c

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Chad Whitten
h > > Sent: Wednesday, July 07, 2004 9:01 AM > > To: [EMAIL PROTECTED] > > Subject: RE: [Asterisk-Users] VoIP hackers gut Caller ID > > > > Adam Hart [EMAIL PROTECTED] wrote: > > > Chris Foster wrote: > > > > The Register is carrying a article writte

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread listas iPfone
t: Re: [Asterisk-Users] VoIP hackers gut Caller ID > why regulate? nobody regulates the return address on a letter sent via > USPS. > > > - Original Message - > From: "Kevin Walsh" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: We

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Leo Ann Boon
brian wrote: Anyone with a PRI/ISDN line can set callerid to anything... Not just voip, not just asterisk. Come on guys. bkw I thought that was the idea of using ISDN. We do it with PBXs all the time, setting the callerid to your DDI number or just set every call to appear to call from the ma

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Steve Underwood
The switches already support this. In most parts of the world an end user trunk can only use a caller ID within their allocated blocks of numbers. Attempts to use other caller IDs usually result in the call being rejected. In some cases it results in the call completing, but the receiver sees a

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Brian K. West
JerJer said they never tried to call him. bkw - Original Message - From: "Steve Totaro" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, July 07, 2004 4:03 PM Subject: Re: [Asterisk-Users] VoIP hackers gut Caller ID > I liked the "NuFone chief

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread rich allen
what do you mean "not quite right"??? if the clid is supposed to be blocked then don't send it. if the far end is a law enforcement or emergency agency then the clid is NOT supposed to be blocked!! if the originating switch had the ability to send or not send, problem solved for voip providers f

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Nicholas Bachmann
rich allen wrote: this is really simple, companies like Nortel, Lucent need to change their code for caller id, if the number should be blocked then dont transmit it to the far end switch That's a really bad idea. Even worse than top-posting. My local PSAP should know what number I'm calling fro

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-07 Thread Nicholas Bachmann
Chad Whitten wrote: this is true, but Bellsouth (our local RBOC) only allows numbers in our DID range to pass. I can set the outbound caller id to anything, but if its not in our DID range, then the lead number of the DID range is sent out. Are other telco's not doing this? No, not as a rul

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread Timothy R. McKee
ECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Boyd Sent: Wednesday, July 07, 2004 17:48 To: [EMAIL PROTECTED] Subject: RE: [Asterisk-Users] VoIP hackers gut Caller ID > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Timothy R. > McKee

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread Timothy R. McKee
D] [mailto:[EMAIL PROTECTED] On Behalf Of Chad Whitten Sent: Wednesday, July 07, 2004 17:51 To: [EMAIL PROTECTED] Subject: Re: [Asterisk-Users] VoIP hackers gut Caller ID this is true, but Bellsouth (our local RBOC) only allows numbers in our DID range to pass. I can set the outbound caller id to any

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread Christopher Lee
> hi... > > here in Italy is almost impossible to set an > invalid cid, if is out of your allowed space. > ie. if you have X numbers on your PRI, > you can only set one of these. nothing more. > on bri you simply cannot do nothing. > > just my 2 cents. Indeed I've noticed here in Australia on BR

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread Alex
4 12:56 PM Subject: Re: [Asterisk-Users] VoIP hackers gut Caller ID > why regulate? nobody regulates the return address on a letter sent via > USPS. > > > - Original Message - > From: "Kevin Walsh" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> &

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread Jeremy McNamara
Alex wrote: Bug generraly author of that article is an idiot. He does not understand the difference beteween VOIP and ISDN PRI. Right on! I agree completely. Jeremy McNamara ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mai

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread Steve Kennedy
On Wed, Jul 07, 2004 at 07:19:44PM -0800, rich allen wrote: > what do you mean "not quite right"??? > if the clid is supposed to be blocked then don't send it. if the far > end is a law enforcement or emergency agency then the clid is NOT > supposed to be blocked!! if the originating switch had

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread Thilo Salmon
> However if I set the CallerID digits to anywhere within our 100-number block > DID range, the exchange will happily pass on the specific number... guess it > might be a combination of Euro ISDN standards and how the local telco's > configure the exchanges. Interesting. Our incumbent "Deutsche Te

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread tpanton
address on a letter sent via >USPS. > > >- Original Message - >From: "Kevin Walsh" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Wednesday, July 07, 2004 10:00 AM >Subject: RE: [Asterisk-Users] VoIP hackers gut Caller ID > > &g

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread Brian Cuthie
bject: Re: [Asterisk-Users] VoIP hackers gut Caller ID This is very interesting... Regulations..USA... But... what can i do faking a caller id? stolen what? what is the point? miklos - Original Message - From: "Steve Totaro" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]&g

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread Stuart Baggs
It is imperative that the ability to set caller ID's is kept as we need this in everyday business. stuart - Original Message - From: "Brian Cuthie" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, July 08, 2004 1:28 PM Subject: Re: [Asterisk-Users]

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread David Boyd
See bottom > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Timothy R. > McKee > Sent: Thursday, July 08, 2004 12:05 AM > To: [EMAIL PROTECTED] > Subject: RE: [Asterisk-Users] VoIP hackers gut Caller ID > > > If he is rout

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread Steve Totaro
[EMAIL PROTECTED]> Sent: Thursday, July 08, 2004 8:28 AM Subject: Re: [Asterisk-Users] VoIP hackers gut Caller ID > > The real problem here is that people shouldn't be using callerid as an > authentication scheme. Lots of people have had the ability to set > arbitrary clid for

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread Timothy R. McKee
R. McKee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Boyd Sent: Thursday, July 08, 2004 08:51 To: [EMAIL PROTECTED] Subject: RE: [Asterisk-Users] VoIP hackers gut Caller ID See bottom > -Original Message- > From: [EMAIL PRO

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-08 Thread michael koehler
On Jul 8, 2004, at 9:51 AM, Steve Kennedy wrote: On Wed, Jul 07, 2004 at 07:19:44PM -0800, rich allen wrote: what do you mean "not quite right"??? i[..]"blocked clid" CLID is NEVER blocked at the SS7 level (well almost), it flagged as withheld. Bingo, if you have a SS7 switch at the net then you c

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-09 Thread Greg Boehnlein
On Wed, 7 Jul 2004, brian wrote: > Anyone with a PRI/ISDN line can set callerid to anything... Not just voip, > not just asterisk. Come on guys. > > bkw Yes, but the Telco has the ability to either pass or deny that. In my X/O PRI configuration, I can only set the CallerID to a number within t

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-10 Thread Nicolas Bougues
On Wed, Jul 07, 2004 at 11:57:31AM -0400, Timothy R. McKee wrote: > This has always been one of my pet peeves, even as I worked in the industry. > A telco switch operating a DS1 on trunk side should enforce caller-id > numbers to be within the range of DID numbers assigned to that trunk. There > s

RE: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-10 Thread Alex
ent: Saturday, July 10, 2004 7:34 PM To: [EMAIL PROTECTED] Subject: Re: [Asterisk-Users] VoIP hackers gut Caller ID On Wed, Jul 07, 2004 at 11:57:31AM -0400, Timothy R. McKee wrote: > This has always been one of my pet peeves, even as I worked in the industry. > A telco switch operating a DS1

Re: [Asterisk-Users] VoIP hackers gut Caller ID

2004-07-13 Thread Alan Laird
Steve Kennedy wrote: There are a few circumstances when called ID can be blocked (it's rumoured certain spook agencies have this ability), however if a "user" withholds CID, then it's just flagged at the local switch and passed switch to switch with the withold CLI flag. The terminating switch shou