Interesting People mailing list archives

IP: ANI is NOT Caller ID: [risks] Risks Digest 21.59 [need to remiind folks on this often djf]


From: David Farber <dave () farber net>
Date: Sat, 11 Aug 2001 11:46:06 -0400



Date: Tue, 7 Aug 2001 21:03:13 -0400 (EDT)
From: danny burstein <dannyb () panix com>
Subject: ANI is NOT Caller ID (Re: Green, RISKS-21.57)

This brings up the reminder that Caller Name/Number ID (CNID) is NOT the
same thing as Automatic Name/Number Identification (ANI).

The former, which is what is used by (the vast majority of) homes and
"regular" (non "800") business lines, can be blocked by the caller on
either a permanent per-line basis, or as a choice per-call. (Usually by
prepending a special code, generally "*70", before dialing out).

The latter, which is in use internally by the telcos and by businesses
with (so-called) toll-free (1-800/888/877/866, and soon 855) numbers, can
NOT be blocked  by the caller. Adding in the blocking prepend will NOT
have any effect.

So... whenever you reach out to a tollfree number, the recipient of that
call *will* get your phone number. Which, of course, lets them kick it
through a database for all sorts of other purposes. Sometimes, as in this
case, namely credit card receipt verification, a perfectly valid and
legitimate one.

The RISK: having just enough knowledge (about blocking CNID) to believe
you're keeping info (your phone number) private when no such thing is
happening.



For archives see: http://www.interesting-people.org/


Current thread: