16 ms·

How do you know if this caller is from the NSA for real? I could get up to all sorts if mischief. Either I can make the NSA look bad, or I can social engineer m

How do you know if this caller is from the NSA for real? I could get up to all sorts if mischief. Either I can make the NSA look bad, or I can social engineer my way into ISPs by pretending to be the NSA. Good on this ISP though!

lukashed 13y ago
I wonder how many would actually comply to such a call (before this whole PRISM thing came up) and how it would move on. I mean - why are they calling? Do they expect them to spell out their root passwords?
cleverjake 13y ago
When I worked for a data center/ISP, there would be occasional government calls. The protocol was to get the persons name, then call them back through the official list of contact numbers (FBI, NSA, CIA, etc).
- TallGuyShort 13y ago
  Also a good strategy when your bank / insurance agency, etc. calls
  - rosser 13y ago
    Yep. The broad principle is never to give out account numbers, your social/government ID number, or any other such thing on a call you didn't initiate.
  - sksksk 13y ago
    There's an old scam that's been going round, where a person calls up a mark claiming to be from their bank. They say that there are some security issues with their bank account and for security reasons, they should call the phone number on the back of their credit card. The mark hangs the phone up, but the scammer stays on the line and plays a dial tone the line, when the mark picks the phone up, they hear a ring tone and then dial the number. The user thinks that they have got through to the bank, but really they are on the phone to the scammer. From that point, they scammer has the mark's trust and can do all sorts of damage.
    - jacquesm 13y ago
      It's an interesting story but the phone system doesn't actually work that way.
      - bcoates 13y ago
        I haven't used a landline in years now, but when I was a kid it worked that way: one end hanging up wouldn't disconnect the circuit, and if the other end took the phone off-hook shortly afterwards it'd still be connected. This would sometimes wind up being the deciding factor in the eternal battle of "which sibling gets to use the phone"
        lostlogin 13y ago
        In my memory it never relied on both parties hanging up here in New Zealand, but on a trip to the UK as as child I noticed that the phone line disconnecting relied on both parties hanging up. I'm 31.
      - sksksk 13y ago
        It does, at least in the UK
        ownagefool 13y ago
        Are you sure about that? I live in Scotland and I think I'd have noticed not being able to hang up a call because the other side didn't.
        semanticist 13y ago
        I also live in Scotland and I've had this happen to me in the past. It almost never happens by accident - the person keeping the line open is paying for it, after all. (Or, traditionally, was, with bundles and free evening/weekend calls, I've no idea if people actually pay for landline calls any more.)
runjake 13y ago
The NSA/CIA never (rarely?) call. Everything is (almost?) always routed through the FBI. If someone contacts you claiming to be from the CIA or NSA, and you are not employed by the DoD, they are very likely to be frauds. From there, you can get the supposed agent's field office, look it up on fbi.gov and call them back. http://www.fbi.gov/contact-us/field http://www.fbi.gov/contact-us/field Be advised that each field office has satellite offices within their jurisdictions. Satellite office addresses and phone numbers are published on fbi.gov also.

lukashed 13y ago

I wonder how many would actually comply to such a call (before this whole PRISM thing came up) and how it would move on. I mean - why are they calling? Do they expect them to spell out their root passwords?

cleverjake 13y ago

When I worked for a data center/ISP, there would be occasional government calls. The protocol was to get the persons name, then call them back through the official list of contact numbers (FBI, NSA, CIA, etc).

TallGuyShort 13y ago
Also a good strategy when your bank / insurance agency, etc. calls
- rosser 13y ago
  Yep. The broad principle is never to give out account numbers, your social/government ID number, or any other such thing on a call you didn't initiate.
- sksksk 13y ago
  There's an old scam that's been going round, where a person calls up a mark claiming to be from their bank. They say that there are some security issues with their bank account and for security reasons, they should call the phone number on the back of their credit card. The mark hangs the phone up, but the scammer stays on the line and plays a dial tone the line, when the mark picks the phone up, they hear a ring tone and then dial the number. The user thinks that they have got through to the bank, but really they are on the phone to the scammer. From that point, they scammer has the mark's trust and can do all sorts of damage.
  - jacquesm 13y ago
    It's an interesting story but the phone system doesn't actually work that way.
    - bcoates 13y ago
      I haven't used a landline in years now, but when I was a kid it worked that way: one end hanging up wouldn't disconnect the circuit, and if the other end took the phone off-hook shortly afterwards it'd still be connected. This would sometimes wind up being the deciding factor in the eternal battle of "which sibling gets to use the phone"
      - lostlogin 13y ago
        In my memory it never relied on both parties hanging up here in New Zealand, but on a trip to the UK as as child I noticed that the phone line disconnecting relied on both parties hanging up. I'm 31.
    - sksksk 13y ago
      It does, at least in the UK
      - ownagefool 13y ago
        Are you sure about that? I live in Scotland and I think I'd have noticed not being able to hang up a call because the other side didn't.
        semanticist 13y ago
        I also live in Scotland and I've had this happen to me in the past. It almost never happens by accident - the person keeping the line open is paying for it, after all. (Or, traditionally, was, with bundles and free evening/weekend calls, I've no idea if people actually pay for landline calls any more.)

runjake 13y ago

The NSA/CIA never (rarely?) call. Everything is (almost?) always routed through the FBI. If someone contacts you claiming to be from the CIA or NSA, and you are not employed by the DoD, they are very likely to be frauds. From there, you can get the supposed agent's field office, look it up on fbi.gov and call them back. http://www.fbi.gov/contact-us/field http://www.fbi.gov/contact-us/field Be advised that each field office has satellite offices within their jurisdictions. Satellite office addresses and phone numbers are published on fbi.gov also.