Comment by SilasX

Right but in this case it was unproxied VoIP, right? It should be easy (in the sense of not requiring a forced universal protocol upgrade, I mean) to at least protect against this kind of attack — a caller from an LA IP claiming to be in Kansas.