<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p><br>
</p>
<div dir="ltr" style="color: rgb(33, 33, 33);">
<div id="divRplyFwdMsg" dir="ltr"></div>
<div>
<div id="divtagdefaultwrapper" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>What ticks me off is the lack of the authorities and the largest telephone companies giving a crap about hunting down where these fraud calls are going and getting them shut down. Also are the large telephone companies even paying the terminating telephone
company or just pocketing the fraud money themselves? Because they seem to enjoy billing the victims and if the victim does not pay they will turn off their service.<br>
</p>
<p><br>
</p>
<p>Seems like a telephone number can be tracked right to the telephone company who delivers the call to the end user which means the end user can be questioned to determine what is really going on. Yes I know they go over seas but the worst telephone companies
who know fraud is happening can simply be told we will no longer deliver calls to you period. Clean your act up or live in your own little cut off piece of the world.<br>
</p>
<p><br>
</p>
<p>Or am I naive? This is not like hacking on the internet. These are telephone numbers which can easily be traced to exactly who is paying for the service and the telephone company terminating the call.<br>
</p>
<p><br>
</p>
<p>Matt<br>
</p>
<p><br>
</p>
<p><br>
</p>
<p>P.S. resending to the list because my new email address was not on the mailing list. my old was. just added it.<br>
</p>
<p><br>
</p>
<p><br>
</p>
<div style="word-wrap:break-word; color:rgb(33,33,33)">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> VoiceOps <voiceops-bounces@voiceops.org> on behalf of Mark R Lindsey <lindsey@e-c-group.com><br>
<b>Sent:</b> Friday, April 24, 2015 1:24 PM<br>
<b>To:</b> Rob Dawson<br>
<b>Cc:</b> voiceops@voiceops.org<br>
<b>Subject:</b> Re: [VoiceOps] (no subject)</font>
<div> </div>
</div>
<div>
<div class="">I talk to a lot of service providers that are improving their security in the aftermath of fraud. When they're recovering from a fraud event:</div>
<div class=""><br class="">
</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>-- They're coping with a loss of tens-of-thousands of dollars. </div>
<div class=""><br class="">
</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>-- The ops teams must answer to senior management about how they let this happen. </div>
<div class=""><br class="">
</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>-- They're confounded to know how the attacker figured out their password scheme, or their phone config file names.</div>
<div class=""><br class="">
</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>-- Sometimes they're frustrated to find a silly mistake that was made long ago, and never fixed.</div>
<div class=""><br class="">
</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>-- Sometimes they're concerned about an insider threat. (Is somebody selling our list of MAC addresses necessary to download all the config files?)</div>
<div class=""><br class="">
</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>-- They may have legal questions, because in hosted PBX and SIP trunking, knowing exactly who's responsible for the security and who's got to pay for the fraud is unclear.</div>
<div class=""><br class="">
</div>
<div class="">So for several reasons, you'll find them in poor spirits, and seldom ready to chit-chat.</div>
<div class=""><br class="">
</div>
<div class="">All that said: good, informal relationships among the engineers and ops folks at different service providers can help a lot. Go to SIPNOC every year and meet your peers at other SP's. And go to your vendors' events, like the BroadSoft and Metaswitch
customer meetings. Get to know some other tech folks, and keep in touch.</div>
<div class=""><br class="">
</div>
<div class="">And of course, we consultants can help too. People from ECG and other consulting firms do promise to keep secrets of our clients, but we also learn the techniques and know-how used by the fraud attackers and the defenders.</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">
<div class="">
<div class="">
<div class="" style="background-color:rgb(255,255,255); letter-spacing:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; word-wrap:break-word">
<div class="" style="word-wrap:break-word"><font size="1" color="#ff2600" class=""><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas">
</span><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas"> </span></font></div>
<div class="" style="word-wrap:break-word"><font size="1" color="#ff2600" class=""><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas">
</span><span class="" style="font-family:Consolas"> ---</span><span class="" style="font-family:Consolas"> </span><font face="Consolas" class=""><a href="mailto:mark@ecg.co" class="">mailto:mark@ecg.co</a> <br class="">
</font><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas">
</span><span class="" style="font-family:Consolas"> </span><font face="Consolas" class="">tel:+1-229-316-0013 <br class="">
</font><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas"> </span><span class="" style="font-family:Consolas">
</span><span class="" style="font-family:Consolas"> </span><font face="Consolas" class=""><a href="http://ecg.co/lindsey" class="">http://ecg.co/lindsey</a> </font></font></div>
<div class="" style="word-wrap:break-word"><font size="1" class=""><font face="Consolas" color="#ff2600" class=""><br class="">
</font></font></div>
</div>
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Apr 24, 2015, at 13:06 , Rob Dawson <<a href="mailto:rdawson@force3.com" class="">rdawson@force3.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="WordSection1" style="font-family:Cambria; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px">
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
<span class="" style="color:rgb(31,73,125)">I wasn’t necessarily thinking of a commercial solution, something more ad hoc, but they do have some pretty innovative and cool solutions.</span></div>
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
<span class="" style="color:rgb(31,73,125)"> </span></div>
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
<span class="" style="color:rgb(31,73,125)">Rob</span></div>
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
<span class="" style="color:rgb(31,73,125)"> </span></div>
<div class="">
<div class="" style="border-style:solid none none; border-top-color:rgb(181,196,223); border-top-width:1pt; padding:3pt 0in 0in">
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
<b class=""><span class="" style="font-size:10pt; font-family:Tahoma,sans-serif">From:</span></b><span class="" style="font-size:10pt; font-family:Tahoma,sans-serif"><span class="Apple-converted-space"> </span>Alex Hardie [<a href="mailto:ahardie@bellsouth.net" class="" style="color:purple; text-decoration:underline">mailto:ahardie@bellsouth.net</a>]<span class="Apple-converted-space"> </span><br class="">
<b class="">Sent:</b><span class="Apple-converted-space"> </span>Friday, April 24, 2015 11:55 AM<br class="">
<b class="">To:</b><span class="Apple-converted-space"> </span>Rob Dawson<br class="">
<b class="">Cc:</b><span class="Apple-converted-space"> </span><a href="mailto:voiceops@voiceops.org" class="" style="color:purple; text-decoration:underline">voiceops@voiceops.org</a><br class="">
<b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: [VoiceOps] (no subject)</span></div>
</div>
</div>
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
</div>
<div class="">
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
Have you looked at PinDrop? They specialize in toll fraud for both enterprises and carriers.</div>
</div>
<div class="">
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
</div>
</div>
<div class="">
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
Alex Hardie<br class="">
<br class="">
alex hardie |<span class="Apple-converted-space"> </span><a href="mailto:ahardie@bellsouth.net" class="" style="color:purple; text-decoration:underline">ahardie@bellsouth.net</a><span class="Apple-converted-space"> </span>| +1 404 229 7635</div>
</div>
<div class="">
<p class="MsoNormal" style="margin:0in 0in 12pt; font-size:11pt; font-family:Calibri,sans-serif">
<br class="">
On Apr 24, 2015, at 11:51 AM, Rob Dawson <<a href="mailto:rdawson@force3.com" class="" style="color:purple; text-decoration:underline">rdawson@force3.com</a>> wrote:</p>
</div>
<blockquote class="" style="margin-top:5pt; margin-bottom:5pt">
<div class="">
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
Anyone aware of a voice fraud mailing list or listing service? Something of a repository of new attack vectors and remediations or something . . . just thinking it would be cool to see what new attacks people are running into.</div>
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
</div>
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
If not, any thoughts on something like this?</div>
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
</div>
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
Rob</div>
</div>
</blockquote>
<blockquote class="" style="margin-top:5pt; margin-bottom:5pt">
<div class="">
<div class="" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
<span class="" style="font-size:12pt; font-family:'Times New Roman',serif">_______________________________________________<br class="">
VoiceOps mailing list<br class="">
<a href="mailto:VoiceOps@voiceops.org" class="" style="color:purple; text-decoration:underline">VoiceOps@voiceops.org</a><br class="">
<a href="https://puck.nether.net/mailman/listinfo/voiceops" class="" style="color:purple; text-decoration:underline">https://puck.nether.net/mailman/listinfo/voiceops</a></span></div>
</div>
</blockquote>
</div>
<span class="" style="font-family:Cambria; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; float:none; display:inline!important">_______________________________________________</span><br class="" style="font-family:Cambria; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px">
<span class="" style="font-family:Cambria; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; float:none; display:inline!important">VoiceOps
mailing list</span><br class="" style="font-family:Cambria; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px">
<a href="mailto:VoiceOps@voiceops.org" class="" style="color:purple; text-decoration:underline; font-family:Cambria; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px">VoiceOps@voiceops.org</a><br class="" style="font-family:Cambria; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px">
<a href="https://puck.nether.net/mailman/listinfo/voiceops" class="" style="color:purple; text-decoration:underline; font-family:Cambria; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px">https://puck.nether.net/mailman/listinfo/voiceops</a></div>
</blockquote>
</div>
<br class="">
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>