4 ms·

Google and others can and do try to protect users from spoofing - in my opinion, every communication service provider should try to prevent their users from bei

by jka 15y ago

Google and others can and do try to protect users from spoofing - in my opinion, every communication service provider should try to prevent their users from being misled by impersonators. I'm not sure educating all users about the spoofability or otherwise of all existing communication systems is the way forward as a tech community - there's more we can do in terms of bolstering existing security and trying to validate/flag existing messages. I've never enabled the ability to 'call from my number' for any services, so I would expect that others would be unable to spoof mine.

richardburton 15y ago
Could not agree more. People trust their phone network. I think the networks do not deserve that trust.
darklajid 15y ago
Google tries - but cannot. Ultimately it can only do the same dance that it does with spam. Learn, improve, tweak - and never succeed. I think a general project to explain encryption/signing would be awesome. I'd _love_ to send mails to my bank, to the government etc. and have them be legally binding. I'm sure it could help against quite some amount of spam as well, if you understand that an address isn't to be trusted by default. I .. don't get that last part. How do you think is the process of being able to authorize a 'from' number? Technically gazillion of services could probably do it. It's inherently simple if you are well-connected. Skype certainly doesn't need to ask you first and have a kind of exchange with you and your carrier that 'unlocks' their ability to use your number in an outgoing call. It's a policy that protects them from abuse (i.e. they care, because of legal implications and because of possible business impact if they'd abuse it). [1] They don't need to get your ok though, if they don't want to. 1: This is based on a limited experience in my past, where I had (legal) access to an asterisk server with a nice trunk connection to a mobile carrier in DE. I certainly don't have extensive telecom knowledge, but got a glimpse at least.
- richardburton 15y ago
  Google tries - that is a good thing! The networks do not. Check this tweet from the mobile network 3: https://twitter.com/threeuksupport/status/162101700595957760 https://twitter.com/threeuksupport/status/162101700595957760
noselasd 15y ago
mail -r obama@whitehouse.gov my_user@gmail.com Done from my home computer on a DSL connection, and surely gmail shows I got a mail from obama.
- richardburton 15y ago
  Does it? Screen-grab?
  - noselasd 15y ago
    here, http://i.imgur.com/MSKJN.png http://i.imgur.com/MSKJN.png

by jka 15y ago

richardburton 15y ago

Could not agree more. People trust their phone network. I think the networks do not deserve that trust.

darklajid 15y ago

Google tries - but cannot. Ultimately it can only do the same dance that it does with spam. Learn, improve, tweak - and never succeed. I think a general project to explain encryption/signing would be awesome. I'd _love_ to send mails to my bank, to the government etc. and have them be legally binding. I'm sure it could help against quite some amount of spam as well, if you understand that an address isn't to be trusted by default. I .. don't get that last part. How do you think is the process of being able to authorize a 'from' number? Technically gazillion of services could probably do it. It's inherently simple if you are well-connected. Skype certainly doesn't need to ask you first and have a kind of exchange with you and your carrier that 'unlocks' their ability to use your number in an outgoing call. It's a policy that protects them from abuse (i.e. they care, because of legal implications and because of possible business impact if they'd abuse it). [1] They don't need to get your ok though, if they don't want to. 1: This is based on a limited experience in my past, where I had (legal) access to an asterisk server with a nice trunk connection to a mobile carrier in DE. I certainly don't have extensive telecom knowledge, but got a glimpse at least.

richardburton 15y ago
Google tries - that is a good thing! The networks do not. Check this tweet from the mobile network 3: https://twitter.com/threeuksupport/status/162101700595957760 https://twitter.com/threeuksupport/status/162101700595957760

noselasd 15y ago

mail -r obama@whitehouse.gov my_user@gmail.com Done from my home computer on a DSL connection, and surely gmail shows I got a mail from obama.

richardburton 15y ago
Does it? Screen-grab?
- noselasd 15y ago
  here, http://i.imgur.com/MSKJN.png http://i.imgur.com/MSKJN.png