←back to thread

379 points impish9208 | 6 comments | | HN request time: 0.889s | source | bottom
1. xp84 ◴[] No.45016094[source]
I'll definitely believe it when I don't see those calls, but I could not be more in favor of turning the phone network into a much more "trusted" type of system -- similar to how SSL certs used to be prior to the Let's Encrypt era, where it requires some form of validation of something besides 'existence':

Conceptually, someone US-based should have to cryptographically sign, with their license to continue participating at stake, an assertion that the source phone number is real. People should be free to configure their devices or phone accounts (A) what countries to accept calls from and (B) whether to accept unverified calls whose numbers are presumably spoofed.

Note: i'm aware that SHAKEN/STIR or whatever exists and shares some of that idea, I'm just looking forward to full adoption of something so that I can make those choices described above.

Combine this next with ability to report numbers who spam (with the Apple/Google duopoly it should be trivially easy to put a "report spam" button in the call UI) and sanction providers (first financially and eventually with revocation of their credential to sign calls).

Maybe 30 years ago it would have been seen as too draconian to prevent someone from being able to call others anonymously but the Internet exists and provides ample avenues for those cliche use cases like "whistleblower needs to talk to journalists" so I'm 100% happy to have 'burdensome regulation' here if it stops scammers from ruining the phone as a usable channel for urgent information like "Your car is ready to pick up from the shop" or "Hi, you're the emergency contact for ____ and they are headed to the hospital."

replies(2): >>45016261 #>>45020644 #
2. bongodongobob ◴[] No.45016261[source]
> Conceptually, someone US-based should have to cryptographically sign, with their license to continue participating at stake, an assertion that the source phone number is real.

But phone numbers aren't real. They aren't any more real than an IP address. It's arbitrary. This is how VOIP systems work. You just assign a number from your block.

replies(1): >>45016349 #
3. xp84 ◴[] No.45016349[source]
I totally get this, however they are assigned -- meaning someone is responsible for them. If you own the range 212-555-0000 through 9999 and you sign calls for spammers as coming from that range, those numbers should be revoked from your control, or you should be denied the ability to sign those outbound calls/texts so that your calls appear as likely fake.

Ideally anyone who owns numbers would stop letting literally anybody do anything with their numbers (the way they do today) because they don't want to lose the numbers or to get banned from operating a PSTN-connected system.

The outcome I'm going for is that if you're a spammer you can't find any US phone number owners who will let you use their numbers so you can only send "unsigned" calls that are obviously spam, or sign calls as originating from irresponsible countries, which are easily filtered out by those of us who don't have any friends in the Phillipines or whatever (I get a lot of "DMV" threat texts from +63)

4. mulmen ◴[] No.45020644[source]
Categorizing “whistleblower needs to talk to journalists” as a cliche really undermines your argument here. This isn’t an insurmountable problem. We have regulatory frameworks. FCC has proven they have teeth. It’s a political problem we can solve without losing any of the benefits of the PSTN.
replies(1): >>45032375 #
5. xp84 ◴[] No.45032375[source]
I'm happy to be proven wrong here where whistleblowers can only use the PSTN. They already, I would wager, universally would not. They use Signal. All the reporters publish their Signal usernames and not their phone numbers.

Why? Probably because the PSTN as normal consumers can access it, is pretty non-anonymous. The best case for anonymity is a burner, but you have to buy those burners somewhere that probably has CCTV, or order them online with a paper trail, so it's pretty risky for someone who needs assurances of anonymity.

No whistleblowers are using SS7 trunks to place anonymous calls.

replies(1): >>45041921 #
6. ◴[] No.45041921{3}[source]