<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Asterisk &#8220;hack&#8221; to show blocked Caller-ID points to larger trust issues with SIP</title>
	<atom:link href="http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/feed/" rel="self" type="application/rss+xml" />
	<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/</link>
	<description>Collective thoughts and musings on the state of VoIP security today.</description>
	<lastBuildDate>Sat, 20 Feb 2010 15:11:37 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.5</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: ayala</title>
		<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/comment-page-1/#comment-321864</link>
		<dc:creator>ayala</dc:creator>
		<pubDate>Mon, 18 May 2009 05:54:42 +0000</pubDate>
		<guid isPermaLink="false">http://voipsa.org/blog/?p=411#comment-321864</guid>
		<description>I think that if they are so worried about identity but what about someone who just doesn&#039;t want to be kept in the dark when receiving a call or if you are getting harassed or threaten by someone who&#039;s hiding their ID I personally experienced that and when that happen the police could not do anything just sit and wait till your stocker or prank caller calls again to find who it is i think if you want to be trusted you must show trust as well and not block your number because you simply think that&#039;s your God given right if you don&#039;t want to let someone know who you are before talking to them then the person who must show trust is you, in other words would you open your door if someone were nocking while wearing a mask? 

I think the issue is with the caller not the end point recipient who is totally unaware of the caller identity after all why get a caller ID service if everyone decides they should blocking their phone I think if they don&#039;t want to be know then don&#039;t call at all but if they gonna block their call why can&#039;t I unblock it?</description>
		<content:encoded><![CDATA[<p>I think that if they are so worried about identity but what about someone who just doesn&#8217;t want to be kept in the dark when receiving a call or if you are getting harassed or threaten by someone who&#8217;s hiding their ID I personally experienced that and when that happen the police could not do anything just sit and wait till your stocker or prank caller calls again to find who it is i think if you want to be trusted you must show trust as well and not block your number because you simply think that&#8217;s your God given right if you don&#8217;t want to let someone know who you are before talking to them then the person who must show trust is you, in other words would you open your door if someone were nocking while wearing a mask? </p>
<p>I think the issue is with the caller not the end point recipient who is totally unaware of the caller identity after all why get a caller ID service if everyone decides they should blocking their phone I think if they don&#8217;t want to be know then don&#8217;t call at all but if they gonna block their call why can&#8217;t I unblock it?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: ssaud</title>
		<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/comment-page-1/#comment-250728</link>
		<dc:creator>ssaud</dc:creator>
		<pubDate>Tue, 09 Sep 2008 19:13:58 +0000</pubDate>
		<guid isPermaLink="false">http://voipsa.org/blog/?p=411#comment-250728</guid>
		<description>Well, here is little question if someone know. How can i know that a call is bridged and what dtmf-relay is being used? someone told me it can be identified from the network trace i.e. TCPDUMP etc .. but not sure how.</description>
		<content:encoded><![CDATA[<p>Well, here is little question if someone know. How can i know that a call is bridged and what dtmf-relay is being used? someone told me it can be identified from the network trace i.e. TCPDUMP etc .. but not sure how.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dan York</title>
		<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/comment-page-1/#comment-221376</link>
		<dc:creator>Dan York</dc:creator>
		<pubDate>Wed, 23 Jul 2008 05:22:50 +0000</pubDate>
		<guid isPermaLink="false">http://voipsa.org/blog/?p=411#comment-221376</guid>
		<description>@Christopher - Yes, I, too, expect that sadly there will need to be a &quot;significant effect&quot; before customers realize how much things have changed from what they expect. Can we get strong identity soon enough?  I don&#039;t know.

@Garrett - Thanks for your kind words and I&#039;m glad it helped.

@aswath - I don&#039;t know that the unregulated access is the issue... people have woken up to the fact that telephony is no longer this arcane and complicated thing when you bring it onto a PC. They are figuring out new ways to do things via VoIP. Regulated or unregulated, I think it still would have happened.

You&#039;re right that SS7 passes the same basic signaling with a &quot;privacy bit&quot; called &quot;CNID&quot;.  The issue is that as @Christopher commented, there were far fewer players in the SS7 club than there are now.

As to your question about &quot;why can&#039;t VoIPers leave the PSTN alone...&quot;, I&#039;ve been working on a draft that answers that precise question (in the way that you posed it to Twitter). I&#039;ll probably work on that on my plane ride home from Portland and post it next week.</description>
		<content:encoded><![CDATA[<p>@Christopher &#8211; Yes, I, too, expect that sadly there will need to be a &#8220;significant effect&#8221; before customers realize how much things have changed from what they expect. Can we get strong identity soon enough?  I don&#8217;t know.</p>
<p>@Garrett &#8211; Thanks for your kind words and I&#8217;m glad it helped.</p>
<p>@aswath &#8211; I don&#8217;t know that the unregulated access is the issue&#8230; people have woken up to the fact that telephony is no longer this arcane and complicated thing when you bring it onto a PC. They are figuring out new ways to do things via VoIP. Regulated or unregulated, I think it still would have happened.</p>
<p>You&#8217;re right that SS7 passes the same basic signaling with a &#8220;privacy bit&#8221; called &#8220;CNID&#8221;.  The issue is that as @Christopher commented, there were far fewer players in the SS7 club than there are now.</p>
<p>As to your question about &#8220;why can&#8217;t VoIPers leave the PSTN alone&#8230;&#8221;, I&#8217;ve been working on a draft that answers that precise question (in the way that you posed it to Twitter). I&#8217;ll probably work on that on my plane ride home from Portland and post it next week.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Aswath Rao</title>
		<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/comment-page-1/#comment-221362</link>
		<dc:creator>Aswath Rao</dc:creator>
		<pubDate>Wed, 23 Jul 2008 04:52:54 +0000</pubDate>
		<guid isPermaLink="false">http://voipsa.org/blog/?p=411#comment-221362</guid>
		<description>The trust boundary was made porous in part by VoIP proponents who lobbied for unregulated access to VoIP providers. So I do not agree that &quot;there are no easy answers&quot;. By the way this form of passing restricted Caller ID could have been done in PRI as well. Why can&#039;t VoIPers leave PSTN alone or live with the rules of PSTN? If VoIP is wild west, why should a gentrified PSTN be forced to interact with it?</description>
		<content:encoded><![CDATA[<p>The trust boundary was made porous in part by VoIP proponents who lobbied for unregulated access to VoIP providers. So I do not agree that &#8220;there are no easy answers&#8221;. By the way this form of passing restricted Caller ID could have been done in PRI as well. Why can&#8217;t VoIPers leave PSTN alone or live with the rules of PSTN? If VoIP is wild west, why should a gentrified PSTN be forced to interact with it?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Garrett Smith</title>
		<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/comment-page-1/#comment-221346</link>
		<dc:creator>Garrett Smith</dc:creator>
		<pubDate>Wed, 23 Jul 2008 03:30:01 +0000</pubDate>
		<guid isPermaLink="false">http://voipsa.org/blog/?p=411#comment-221346</guid>
		<description>Dan:

Thanks for this post. I will be the first to admit that I am not a nuts and bolts telephony guy, so I was looking at this from the, &quot;is there anything that people are not doing with Asterisk,&quot; but after reading this, wow, what a problem this could be.

Again thanks for increase my acumen here on this subject - you rock!</description>
		<content:encoded><![CDATA[<p>Dan:</p>
<p>Thanks for this post. I will be the first to admit that I am not a nuts and bolts telephony guy, so I was looking at this from the, &#8220;is there anything that people are not doing with Asterisk,&#8221; but after reading this, wow, what a problem this could be.</p>
<p>Again thanks for increase my acumen here on this subject &#8211; you rock!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Christopher Herot</title>
		<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/comment-page-1/#comment-221303</link>
		<dc:creator>Christopher Herot</dc:creator>
		<pubDate>Wed, 23 Jul 2008 01:18:36 +0000</pubDate>
		<guid isPermaLink="false">http://voipsa.org/blog/?p=411#comment-221303</guid>
		<description>I agree that &quot;trust boundary&quot; is the operative concept here.  Back when telco was a small club the Caller ID was set by the originating CO and the display of same was handled by the terminating CO and everyone played by the same rules.  Now that those boundaries have become more porous, not everyone respects the old rules, but the customers haven&#039;t figured it out.  I&#039;m waiting from some high profile case where someone relied on caller ID for identity or relied on the carrier for anonymity but didn&#039;t get the intended result.  Do you think we&#039;ll get &quot;strong identity&quot; in time?  I doubt it.</description>
		<content:encoded><![CDATA[<p>I agree that &#8220;trust boundary&#8221; is the operative concept here.  Back when telco was a small club the Caller ID was set by the originating CO and the display of same was handled by the terminating CO and everyone played by the same rules.  Now that those boundaries have become more porous, not everyone respects the old rules, but the customers haven&#8217;t figured it out.  I&#8217;m waiting from some high profile case where someone relied on caller ID for identity or relied on the carrier for anonymity but didn&#8217;t get the intended result.  Do you think we&#8217;ll get &#8220;strong identity&#8221; in time?  I doubt it.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
