The first part of the operation involves getting a target's cell phone number from a public database that links names to numbers for caller ID purposes. DePetri

The first part of the operation involves getting a target's cell phone number from a public database that links names to numbers for caller ID purposes. DePetrillo used open-source PBX software to spoof the outgoing caller ID and then automated phone calls to himself, triggering the system to force a name lookup. Uh, oh. And the rest does not look good either - the attack looks credible (the tracking bit looks legally iffy). the hands of GSM providers in the U.S. are tied. Just today was talking with a lawyer who's reviewing data protection legislation, vs. mandated (by EU regulations) information disclosure requirements. There may not be a way of reconciling both ...