Re: Premium Messaging Service Received


"The Drone" <wsne@xxxxxxxxxxxxx> wrote in message
news:Hi7G57AWTwYEFwJ0@xxxxxxxxxxxxxxxx
AIUI, part of the problem is that someone can subscribe to these premium
services on a web site - about which the network knows nothing. To an
extent therefore, they are reliant on the provider of the service being
honest ...

The solution is simple. Networks shouldn't be allowed to charge for
incoming texts unless they have some sort of proof that the customer
has signed up. Imagine if your bank account worked the same way - I
can take a tenner out of your account just by telling your bank that
you owe me it, without any proof. Then your bank tells you to chase me
if you didn't really owe me it!

There's a balance to be struck between providing a service for those
that want these messages that is easy to use (including immediate if
required) against protecting those of us who don't want them from
mistakes - or scams. I don't know where the balance lies, making it more
robust against mistakes or scams would probably make it harder for
service providers and their customers.

For a start, all networks should provide and publicise the option to bar chargeable
incoming texts.

Secondly, they should only be charged if a text has been sent *from* the phone in
question. If someone wants premium rate incoming texts, they should have to request
it via the phone they want the texts sent to, not via the web etc. This would at
least provide proof to the network that a text was sent from the phone to the
provider.

Your analogy is not really fair either. The bank are guarding /your/
money; if you're billed for a dodgy text, you can refuse to hand over
your money so you still have it.

Not if you're on PAYG. There the network are guarding /your/ credit just like a
bank. A few such texts could eat up all your credit leaving you unable to make
calls.

Also, I doubt whether a network would
hand a tenner (or 1.50) to you any more than a bank would unless they
had some reasonable expectation that the request was kosher. Just like
banks who will accept direct debits against your account if they believe
the payee is kosher.

It should work like DD. With DD you can request an immediate refund from the bank,
which they have to pay, they then have to chase to payee for either the money back,
or proof that the DD was legit and the rules were complied with.

Perhaps your commercial relationship for these texts should be with the
service provider alone. They could bill you or debit your card direct
without involving the networks.

Yes - then if some company you've never heard of charges you, you simply phone the
bank and tell them. They put the amount "into dispute" while they ask the company for
proof you authorised the transaction. If they can't provide it, they refund you. If
this happens frequently with a particular company, their merchant card facility will
be terminated.

You should have a space after the two hyphens - then your sig wouldn't
have been quoted!

I think OE strips it out. How's this?

--
Andy


.

Relevant Pages

  • Re: firewalling off the world?
    ... Tolerance is a 2 edged sword. ... would only stop traffic within his network. ... connects per minute at the core firewall. ... I got in touch with my provider ...
    (comp.os.linux.security)
  • RE: Bank Audit Best practices
    ... Your recommendation is in tune with best practices. ... educate the decision makers on internal FW, ACLs and network segmentation ... Subject: Bank Audit Best practices ... I'm looking for some feedback from other people who conduct security ...
    (Pen-Test)
  • spork Both pining now, Fahd and Yosri chated the lesser commissions ahead of front camera.
    ... instead of the bank. ... A lot of simple maps above the convinced auction were ... signal the network. ... smile potentially or Georgette will line the consciences. ...
    (rec.games.roguelike.nethack)
  • Re: Legal? Road Runner proactive scanning.
    ... I am of two minds over such probes from a network provider. ... relays and proxies on home-based computers. ... > else's network without permission. ...
    (Security-Basics)
  • RE: Bank Audit Best practices
    ... I was the network administrator for a small community bank for a few ... > security risk, as there is no control from the bank side regarding the ... Attend a course taught by an expert instructor with years of in-the-field ...
    (Pen-Test)