Hacker News Reader

The best part of all of the number spoofing is now I get real calls from real people who are "calling back" the spam call they received from my number.

So I'm getting double-hit by the fact that somehow you're just allowed to place calls from a number you don't own and that's considered a valid part of the phone system still in 2023.

View on HN

I get that this is for businesses (mostly) so every outward call seems to originate from a single number, but why in the hell can't there be a verification that the number originated from that specific business? Isn't everything digital now? Just do NATing with phone numbers.

That’s basically what STIR/SHAKEN is designed to do, what you’re talking about is going to be handled by the certificate authorities. Carriers are ramping up the way they flag or restrict unverified calls as the system is more widely implemented. Echoes of how HTTPS slowly became universal.

Yeah that's what I don't understand. It should be 100% impossible to spoof some random number no matter what, and spoofing a business number should be heavily authenticated to make sure that only the business the owns that phone number can do it.

Reply on news.ycombinator.com