15 ms·
I know it's overkill, but this is my current setup for my phone numbers. I treat phone numbers the same way I do my email address: I use different numbers for d
by HugoHobling 7y ago
I know it's overkill, but this is my current setup for my phone numbers. I treat phone numbers the same way I do my email address: I use different numbers for different purposes.
1. I have a "clean" phone number I only share with friends/family. Certain prefixes and phone number actually receive next to zero spam calls. This number has received 2 calls in the years I've had it.
2. I have a phone number I share with companies / loyalty programs / etc.
3. I have a legacy phone number I've had for 10 years that receives multiple spam calls daily. For this number I've set up an incoming handler that uses Google Cloud to ask the caller a simple question (What is five plus two?), parses with the Speech Recognition API, and forwards calls with the correct answer. The rest go to voicemail. It's better to use the speech recognition API than it is to ask the caller to press a DTMF tone, in case they are in a car or are calling from a device without a telephone keypad. If I every need to, I'll add this protection to use numbers 1) and 2).
4. I have a number that rings straight to voicemail.
All numbers use the Whitepages and Nomorobo APIs from Twilio. These score the "spamminess" of calls. Calls with sufficiently high values are forwarded to voicemail.
For incoming calls, I set the caller ID for the calls to my SIP clients to indicate which number is being called, and include the spam score.
- chrisbroadfoot 7y agoVery cool. How do you route your legacy number? Did you port it to Twilio?
- HugoHobling 7y agoI ported the legacy number to another SIP provider. Twilio is still cheap ($1 a month or so per DID, plus $0.004 per minute), but other providers are less than half that. For that price difference, I had no reason to choose another provider so I mostly did that for fun and experimentation.
- lysp 7y agoWhen I was younger I used to work for a market research company doing surveys over the phone. The way their process worked was: * Big company wanted a survey completed. * Big company would want it targeted to a specific state/regional area, so would provide a list of post/zip codes. * Survey company would translate the list of codes into phone prefixes for each area. * Computer would randomly generate phone numbers in the area - starting from xxxx 0000 through to xxxx 9999 for operators to call. That meant you'd get disconnected numbers, businesses, private/silent numbers, faxes, modems, etc. So having a "clean" number didn't protect you. While a few projects were targeted to specific people/numbers - most were just random.
- k__ 7y agoIn some countries it's illegal for companies to call random people, they need to gather opt-ins from all people they wanna call.
- chabes 7y agoIt doesn’t seem like it’s being enforced in the US, currently..
- fjp 7y agoThey actually do try to enforce it, but right now it's a losing battle. You can spin up a new voip company and start blasting scam calls from an overseas call center in a weekend, then spin that company down before anyone has any idea who you are. Customers complain to carriers, who then either get the offending voip provider to block the scamming customer, or just threaten FCC action. But the whole cycle is so slow and you're fighting a never-ending shapeless horde. I think STIR/SHAKEN will help with this if it ever gets fully implemented and enforced, and voip providers are always trying to come up with better fraud detection to avoid the man-hours associated with assuaging carrier concerns, blocking the customers, etc, etc.
- jdc 7y agoHere's a kind of adversarial test of that hypothesis: 1. Spin up new voip company 2. Issue death threat to US President (or similarly powerful man) 3. Spin down voip company 4. Wait to see if/when someone finds out who you are
- soneca 7y agoImpressive. But what's the need of number 4? Why not just give up that number?
- HugoHobling 7y agoI have a mobile phone, and don't want to use the carrier's voicemail. I use Asterisk instead, and also use Speech Recognition to get an email transcript of voicemails.
- badrequest 7y agoOut of curiosity, how much does this setup cost you to run per month? My main aversion to Twilio is their awkward pricing scheme.
- HugoHobling 7y agoHardly anything. SIP calls through Twilio are $1/month plus $0.004 per minute for incoming calls. The spam scoring APIs are "costly", and maybe cost $0.01 combined per lookup. Google Speech Recognition and TTS are virtually free for my use case. Asterisk can easily run on a $5/month VPS.
- ozmbie 7y agoIs this a uniquely American problem? My Australian mobile phone receives maybe one spam call per year. It’s my single phone and I give out the number to various businesses and people.
- jlizzle30 7y agoI think so. I never had this problem in Canada but it's been terrible since moving to the US.
- paranoidrobot 7y agoIt's primarily an American problem, but I've seen in the last year or two an uptick in certain kinds of Spammy activity to my Australian mobile number. The most prominent type, and have appeared in the last two years are the one-ring-only calls from some foreign country. They're trying to get you to call back to some premium-rate number. The second are SMS based random spam. Just an hour ago I got spam from "JbHiFi" (even though it's not them, I've never given JB my number) with phishing/spam "you won a contest". I also get random SMS spam from other sources. Then again, if you have any kind of landline in a regional area you're going to get a ton of fake NBN/Telstra/ATO/etc scammers.
- 0xdeadb00f 7y agoI'm in Australia. I'd say I get between 5-10 spam calls a year.
- voltagex_ 7y agoThis year I've been getting three types of spam calls (in Australia): 1. Spam call from new 03 8xxx xxxx range, I was sure these were VoIP numbers handed out by MyNetFone but haven't been able to prove anything. I can't remember what the content of the call was 2. International spam call from Mozambique (?). The call never connects if I pick up. 3. Private number, recorded voice in Mandarin. I think this is a tax scam. I'm sure I'd seen some changes in the laws regarding caller ID this year, but I can't find it. Yes, it's much, much worse in America.
- _Codemonkeyism 7y agoBasically get no spam calls in Germany, sometimes from companies where I'm a customer.
- rsync 7y ago"2. I have a phone number I share with companies / loyalty programs / etc." How does this one work and who provides this number ? I ask because a twilio number is not a mobile number and therefore cannot receive 2FA from "short codes". I am sure you know what I am talking about and have run into this ... so I ask, if you have a number that you give out to "companies" (as I also do) do you have a mobile number that can accept SMS from shortcodes ?
- deleted 7y ago[deleted]
- js2 7y agoI don't have any trouble receiving SMS messages from short code senders to either my Google Voice or my VoIP number. Is this problem specific to Twilio? Sometimes sites want to know my mobile provider (why does it matter?), so I just choose Verizon or Other. The only site that won't accept my GV number is att.com. Oh the irony...
- DuskStar 7y agoI find sites that won't accept my Google Voice number on a semi-regular basis. I think the most recent was Uber, which I discovered when moving phones a few months back.
- js2 7y agoI wonder if I have more success because my GV number was originally a cellular number (many many years ago). I've used it with Uber and Lyft successfully.
- astura 7y agoYeah, Uber blocked my GV number.
- SomeOldThrow 7y ago
- waffle_ss 7y agoThat sounds like a cool setup. I used to daydream about putting together a neat setup like that with Asterisk but over time I’ve actually regressed and even started giving out my direct cell number instead of my Google Voice.* Having kids, buying a house/land, starting a business, contracting with services - every once in awhile I’ll get a high priority call that I really don’t want to be delayed (emergency at school or daycare, last minute problem with land/house offer, etc.). One time even my doggie daycare called because my dog had collapsed and they were doing CPR in the background and needed my consent to emergently administer epinephrine. I also live in a rural area and I wonder if I tried to get a local business or contractor to return a call if they’d assume they had a wrong number if they called and a robot asked them to do a math problem. I know I’d not infrequently get confused voicemails with my Google Voice number (“Not sure I’ve got the right number but ...”). So in the interest of not wanting to risk those rare important calls being delayed or blackholed I’m one of those luddite bozos who answers every call and has to deal with hanging up on the occasional spam call. :-) * The other reasons I’m dropping Google Voice are 1) it seems like it noticeably affects call quality, at least in my area (particularly w.r.t. latency; I imagine there are fundamental round tripping issues since I’m in the midwest, and I’m sure the cell networks also have a lot to answer for here compounding the problem with the inherent latency of modern voice calls compared to the old POTS) and 2) I’m trying to get ahead of Google pulling the plug on the service and leaving me to track down and update phone number info everywhere and 3) not being able to do iOS stuff with other “blue text” phones (“call me on my other number in order to Facetime”)
- mttyng 7y agoHow did you set this all up? It’s really interesting to me. Is there an article somewhere?
- HugoHobling 7y agoI'm not aware of any documentation that's all in one place. It all uses basic Asterisk functionality with FAGI scripts to do anything with advanced logic.
- mttyng 7y agoIs that via Twilio? Or something else?
- HugoHobling 7y agoTwilio essentially provides the phone number. Calls to and from are sent over the internet using the SIP protcol. Twilio can talk to Asterisk or Freeswitch or any similar project. Asterisk has incredible customizability, so that's where I do everything.
- boring_twenties 7y agoWow. I've been praying for a Google Voice replacement for around a decade now, I guess this it it!
- r_singh 7y agohttps://www.openphone.co https://www.openphone.co is a 2019 YC company trying to make a replacement.
- shaklee3 7y agoWhat's wrong with Google voice? Afaik it's not being deprecated.
- chaostheory 7y agoI hope it gets even more popular soon to keep it from getting killed. Even in the valley, very few people I know are aware of Google Voice let alone use it. Google deprecation is always on my mind which causes me to stay away from any new Google products.
- boring_twenties 7y agoAFAIK it isn't, but it's Google, so there's a 50/50 chance it could be deprecated tomorrow. I'm dying to jump ship whether or not it's deprecated though, because the web and Android apps are just unbearably shitty. The web app simply fails to keep up with my typing speed (I can't even imagine how they accomplish this), and the unread counts are usually incorrect. The Android app doesn't even handle the compose SMS intent, so you can't use it as the default for outgoing messages... this was briefly fixed when they folded Voice into Hangouts, but then broken again 6 months later or so when they decided to roll that back.
- boring_twenties 7y agoOof, I don't know how I forgot about this one, but attachments. I just got a "text/x-vcard" attachment from someone. Google Voice helpfully displays it as "file type not supported" -- there is no way to download it, view it as text, or do anything other than tell the sender that I'm using a shitty Google product and please copy/paste the info out of it manually and send it to me.
- dmix 7y agoWhich SIP client do you use? I'm having trouble finding a good voip client. The telecom world is full of bad software with 1990s designs. Endless confusing configuration forms with vague repetitive labels.
- HugoHobling 7y agoI use Bria, and it's decent. It supports push notifications for calls, which is necessary on iOS. The app costs money, but comes with excellent support if you run into issues. There are free and open source apps, and the quality of these are hit and miss. The push notification necessitates the app sharing SIP credentials with Counterpath (the company that makes Bria), so it's good to have some fraud protection for the extension in Asterisk in the event that Counterpath gets breached. They are a publicly traded company, so hopefully they have decent security.
- xorcist 7y agoThe one built into Android is basic but functional. It's a bit hidden in the user interface but here's how to configure it: https://support.google.com/phoneapp/answer/2811843 https://support.google.com/phoneapp/answer/2811843 It's not useful over the open Internet but on a local WLAN or over a VPN call should work fine. Unless you use a damaged phone book storing SIP URLs for your regular contacts should work too. No messaging or fancy codecs though.
- fortran77 7y agoI provision fresh DIDs all the time from my VOIP vendor. Robocalls don't work off a list of numbers, they just call every number in order. The best strategy -- get an area code that's not local and where you don't know anyone. That's what I have on my personal cell phone. Any call that comes in from that area code I know is spam. I don't answer it.
- underdown 7y agoRobocalls absolutely work off a list of numbers. Sure you could just load up a list of all numbers.
- bradknowles 7y agoI am strongly inclined to switch over to using a 900 number as my official public number for everything. Anyone who really wants to call me can afford the small charge it would require. Everyone else can just hang up.
- awwstn 7y agoRequest for startup! I would happily pay $20/month for a service that makes it easy to replicate this setup.
- HugoHobling 7y agoI can see the appeal of this, and have given some thought to it. However American Telco regulations are a huge barrier to entry. There are various state and federal rules, so it wouldn't be an easy side project.
- darynaop 7y agoHey! We might be just what you're looking for :) www.openphone.co Happy to answer any questions and talk about my own setup!
- doxavore 7y agoI'd be interested in hearing about other setups. I use GoDaddy's SmartLine today - could you speak to how openphone.co is different?
- bradknowles 7y agoI use the Firewall app on iPhone. All phone numbers in my Contacts app go into a whitelist that is maintained only locally on my phone. When a call comes in, a notification gets fired off to the Firewall app, and it checks the number against the whitelist. If the number is on the whitelist, then it actually uses a functional replica of the iPhone Phone app UI to "ring" the call through. If the incoming call is from a number not on my whitelist, then it checks the blacklist of known bad actors. If the caller is on the blacklist, then the call just gets blocked. I get a notification from Firewall that a call from a known bad actor was blocked. If the incoming call is not on the whitelist or the blacklist, then it goes to voicemail, where it gets transcribed, and I get a notice that Firewall sent a call to voicemail. I'm hoping that this is basically the same workflow we will see with iOS 13, just built into the basic iPhone Phone app. Then I should be able to stop using Firewall. But I certainly don't need Nomorobo or any other such tool. Firewall solves all those problems, and does so better than any of the alternatives.