Phone Records Obtained Through Spoofing
this should be easy to stop
why cant they just implement another security password.
Spoofing is an attempt to gain access to a system by posing as an authorized user. Synonymous with impersonating, masquerading or mimicking. 🙂
Spoofing is an attempt to gain access to a system by posing as an authorized user. Synonymous with impersonating, masquerading or mimicking. 🙂
...
People can put passwords on their VZW accounts. If you can't verify the password, then you have to go to a store and show id to change it. You don't get to 'fall back' to the last four of the ssn. I've had accounts with all four major carriers at some point, plus AT&T, all verified the last four of my ssn. I didn't even think about it being a problem until now.
...
It is not as easy as it seems. Adding security to privacy on phn accounts is for most subscribers a hassle. This is one of the main concerns on the Customer Service industry. Sometimes is cheaper to have security leaks than loosing customers to security procedures.
...
Not only is it a hassle, but your dog's name, city of birth, and password can be arbitrary and unverifiable. They can change at any time -- its nothing as static as a social security number.
Unfortunately, all the "static" information that makes you you is easily obtainable. Its almost public knowledge.
If I call Sprint and tell them i forgot my password, they let me reset it with the last 4 of my social. Its these failsafes for people like me (and you) that will always make an account insecure.
Showing your ID at a store sounds extreme...i wonder how tightly they force such a thing? If I was abroad or roaming outside Verizon territory, i wonder if they would "make an exception"?
It sounds like until lying to a business...
(continues)
Unfortunately, all the "static" information that makes you you is easily obtainable. Its almost public knowledge.
If I call Sprint and tell them i forgot my password, they let me reset it with the last 4 of my social. Its these failsafes for people like me (and you) that will always make an account insecure.
Showing your ID at a store sounds extreme...i wonder how tightly they force such a thing? If I was abroad or roaming outside Verizon territory, i wonder if they would "make an exception"?
It sounds like until lying to a business...
(continues)
...
And then all you would have to do is yell, scream and threaten to cancel, then they would "know" you were their customer.
...
Lying to a business to get this info already is a crime - fraud. Social engineering I think. The new legislation they want isn't to stop the calls to the carriers, its to make it illegal to sell the records. That will force it underground so it isn't usable in court anymore. One of the articles on this said lawyers are the biggest market. If they can't use the records in their case, what's the point? Private investigators may still use it though, but it narrows it a bit.
...
Well, if the federal government won't put a stop to it, it looks like the carriers will make an attempt. Too bad it will not work in the long run. Cingular filed against locatecell.com yesterday. I gather both Cingular and Verizon have filed lawsuits against various companies for this sort of thing. The problem I see is the carriers are getting stuck with court costs (which of course get passed along to us eventually) and companies like locatecell lose, then go start again under a different company. Or move to Canada. The only way to really stop this is for the government to enact a new law to make it illegal to sell these records (not a fan of new laws for every little thing, but if it's needed) or the Supreme Court to reinterpret an ...
(continues)
(continues)
...
This forum is closed.
