[conspire] (forw) Re: Email( spoofing)

Rick Moen rick at linuxmafia.com
Fri Aug 19 16:55:28 PDT 2022


Quoting Paul Zander (paulz at ieee.org):

> A bogus email is less annoying than spam phone calls.  A week or two
> ago, I received 8 phone calls all from "unavailable".  All left voice
> mail saying it was Amazon calling about an order for an iPhone.  Press
> #1 to confirm; Press #2 if I didn't place the order.

tl;dr:  Incoming voice calls (and CallerID[1]) are unauthenticated.
Everything else flows naturally from that.

[1] The IETF SHAKEN/STIRRED auth. protocols should remediate this
partially, as it gets rolled out, but CallerID still should not be
relied upon.




More information about the conspire mailing list