Forgot your password?
typodupeerror

Comment Re:You are protected (Score 1) 54

it's just so much easier to centralize it

Fully-decentralized trust systems just don't work. PGP failed primarily for this reason, while SSL Certificate Authority system succeeded -- which shows that you don't need perfect centralization, a federation can do it, but the federation has to contain a sufficiently small set of authorities that it's practical for those who need to trust them to do so. The SSL analogy is useful in another way, too. Note that end-users don't know or care about CAs, they only have to trust their browser; the browser authors package the list of trusted root CAs, and they're moderately well-positioned to make those trust decisions on their users' behalf (the certificate transparency log is another layer, a global, fully-decentralized oversight mechanism -- but I don't see an obvious analogue for caller ID).

Applying this structure to caller ID trust, the most obvious points of control are the network operators first and phone makers second. Clearly the MNOs should be taking responsibility. They each know the accuracy of the IDs originating in their networks, and they are in a good position to validate the trustworthiness of IDs from outside their networks. Ideally, they should probably just refuse to forward an ID from a network that doesn't commit to anti-spoofing.

However, they're not doing that, and they're not going to do that, and we all know why: It's more profitable for them to permit spoofing.

One possible market-driven solution to this would be if some sufficiently-large networks decided that consumers cared enough about caller ID accuracy to make it a selling point for their services, committing to send only trustworthy IDs, either because they know the origin within their own network, or because the ID came from another operator who made the same pledge. My guess is that this would require renegotiation of interconnection agreements, but it could be done. More importantly, it would require users to care enough about caller ID spoofing to be willing to switch networks to get away from it. I don't know if that's in the cards.

So, what about the phone makers? They're in the next-best position... and Google by itself can put a big dent in caller ID spoofing globally. If Apple does the same thing between their devices, and then if they collaborate with Google (not an outlandish idea; Google and Apple often collaborate on technical standards), they could ensure that any call originating from a mobile phone provides accurate caller ID, and block the rest. And then they could also collaborate with the dumbphone makers and any new entrants to the smartphone market.

I think this is actually not a bad solution, and the market-driven motivations are clear. Phonemakers benefit from happy phone users and don't profit from phone spam.

Comment Re:Just keep those 3rd world Muslims coming in (Score 2) 155

Yes. Evangelicals and other Christian fanatics are really no better than Muslim fanatics, they are just better organized and more sneaky. All fanatics are bad. Period. All fanatics are loud and try to rule the world. And all fanatics try to force others to think their way. They are the one group in the human race (besides the Billionaires these days) that must be carefully controlled and limited and, if needed, suppressed. Because if that does not happen, then everything goes to shit.

Also refer to "The Paradox of Tolerance" (https://en.wikipedia.org/wiki/Paradox_of_tolerance), which essentially says that the one group you must never tolerate are those that promote intolerance.

Comment Re:Dude deregulation isn't a panacea (Score 5, Informative) 155

Indeed. But the crap MS does stops now. I have no idea how they could be so incredibly stupid to block the ICC accounts or, recently, leak the names of Swedish Government Regulators to the US Congress. Yes, they are required to do this by law (just a "maybe" for the first case), but it seems MS has not fought back one bit and they did not really oppose the Cloud Act when they could have when either.

It is now exceptionally clear to any government and most companies on the planet that US companies like Microsoft can disable your MS-based IT when the US administration wants them to do so for arbitrary reasons or personal vengeance but the regime leader and can also steal all your data in there and hand it to the US administration. That completely removes any longer-term future for this tech outside of the US.

Comment Re:EU will not Deregulate To Accomplish This (Score 5, Insightful) 155

That is really insightless nonsense. I have done GDPR audits for companies as small as 5 people working there. It takes one person with a working brain a few days to figure this out. That is, unless you plan to steal your customer's data and use every loophole available. Then it gets really tricky. And that is why the billionaires complain and useful idiots believe this nonsense.

Slashdot Top Deals

God made machine language; all the rest is the work of man.

Working...