Spoofstick

If you have suggestions to make Avant Browser even better, describe them here.

Moderators: Support Staff², Support Staff, AvantGuard, Developer

Post Reply
derrillfox
Newbie
Newbie
Posts: 1
Joined: Sat Sep 25, 2004 4:46 pm
Avant Version:

Spoofstick

Post by derrillfox » Sat Sep 25, 2004 4:55 pm

Spoofstick - http://www.realtimecredentials.com/spoofstick/ - This program is a great security feature and needs to be added.

User avatar
ftboomer
Avant Fanatic
Avant Fanatic
Posts: 295
Joined: Tue Sep 07, 2004 8:50 pm
Windows Version: Windows 7 x64
Avant Version: Latest
IE Version: IE8 x64
Location: Tampa, FL
Contact:

Post by ftboomer » Sat Sep 25, 2004 4:57 pm

I heartily agree. I use this in IE when I'm not sure where the re-direct is taking me. It would be a GREAT addition to Avant.
Image
Give me a dirty martini and a great cigar, cause nothing beats a nice tight white ash!

User avatar
hornakapopolis
AvantGuard
AvantGuard
Posts: 11321
Joined: Thu Jul 31, 2003 2:09 pm
Windows Version: Windows 10 Pro 64
Avant Version: 2015
Default engine: Chrome
IE Version: 11
Skin: Stickers
Location: Ohio, USA
Contact:

Post by hornakapopolis » Sun Sep 26, 2004 12:51 am

I've checked it out, but never ran into a situation where I've needed it.

But, with all of the crummy, useless, "search engine clone" toolbars out there, this would be a incredibly useful one. Especially for those that aren't necessarily "net savvy"

I'll add my support.

bigC
AvantGuard
AvantGuard
Posts: 7244
Joined: Thu Jan 30, 2003 10:40 pm
Windows Version: 10
Avant Version: 2016 Build 1
Default engine: Firefox
IE Version: 11
Skin: Crystal
Location: New York

Post by bigC » Sat Oct 23, 2004 9:31 pm

Wasn't this spoofing vulnerability fixed in a recent IE security patch?

LDMartin1959
Newbie
Newbie
Posts: 9
Joined: Thu Sep 30, 2004 3:33 am
Windows Version: Windows
Avant Version:
Location: PacNW

Post by LDMartin1959 » Sat Oct 23, 2004 10:09 pm

Wasn't this spoofing vulnerability fixed in a recent IE security patch?
Well, the stick is not just useful against the spoof vulnerability that it was designed for, but also for non-savvy users (and idiot "law enforcement" people and idiot "managers" at web-hosting services) who do not realize (or refuse to understand) that an address such as < http://signin.ebay.com.lzve.us/index.html > isn't really EBAY just 'cuz it has 'ebay' buried in the address.

LDMartin1959
LDMartin1959

User avatar
hornakapopolis
AvantGuard
AvantGuard
Posts: 11321
Joined: Thu Jul 31, 2003 2:09 pm
Windows Version: Windows 10 Pro 64
Avant Version: 2015
Default engine: Chrome
IE Version: 11
Skin: Stickers
Location: Ohio, USA
Contact:

Post by hornakapopolis » Sun Oct 24, 2004 1:51 am

LDMartin1959 wrote:< http://signin.ebay.com.lzve.us/index.html > isn't really EBAY just 'cuz it has 'ebay' buried in the address.

LDMartin1959
Hey!

Just wanted to let you know that your link doesn't work. And eBay is up because I just went there... and you're clearly linking to eBay.


:wink:

LDMartin1959
Newbie
Newbie
Posts: 9
Joined: Thu Sep 30, 2004 3:33 am
Windows Version: Windows
Avant Version:
Location: PacNW

Post by LDMartin1959 » Sun Oct 24, 2004 12:12 pm

Just wanted to let you know that your link doesn't work. And eBay is up because I just went there... and you're clearly linking to eBay.
You are correct in that the link is not working. That is because after many hours of frustration, phone calls and e-mail I finally got the site pulled (no thanks to any of the law enforcement agencies who are supposed to be dealing with this sort of thing: "I'm sorry, if you were not a victim of fraud you can not file a complaint about it." Based on that interpretation of the law, am I also to take it that only person who can file a complaint about a homicide is the victim?)

You are NOT correct, however, in that it was NOT a link to eBay. It was in fact a phising site, hosted by Yahoo, owned by a guy in Miami, Florida. It was designed to harvest your eBay user id and password as well as your credit card number (and the pin number you use to access your account via ATM's).

The fact that it had eBay in the address was a deception designed to give the website an added air of authenticity for the folks who were told to check the address in their browser to make sure it 'matched' the site they thought they were visiting ('If it says ebay in the address bar, you are on the ebay website'). Since ebay appeared in the address, people would take it to be an authentic ebay website, when in fact the actual website was < http://www.lzve.us >.
LDMartin1959

Sergei
AvantGuard
AvantGuard
Posts: 2488
Joined: Fri Sep 19, 2003 5:09 am
Windows Version: Windows
Avant Version:
Location: Galway, Ireland
Contact:

Post by Sergei » Sun Oct 24, 2004 1:31 pm

(There was a winking smiley at the bottom of the previous post, LDMartin1959.)

And you ATN PIN too? Anyone who gives that out without smelling a rat had better not be on eBay anyway...
My Cartoons
:
IE7 ][ Windows XP Tablet PC Edition 2005 ][ Avast! Antivirus ][ Kerio Firewall ][ DSL

LDMartin1959
Newbie
Newbie
Posts: 9
Joined: Thu Sep 30, 2004 3:33 am
Windows Version: Windows
Avant Version:
Location: PacNW

Post by LDMartin1959 » Sun Oct 24, 2004 2:05 pm

I saw the wink but wasn't sure what he was winking about: I took his message as being serious. Sorry, hornakapopolis (is that horna, for short?), I missunderstoond. It is just too dang early in the morning for me to be up and trying to think. :cry:
LDMartin1959

User avatar
hornakapopolis
AvantGuard
AvantGuard
Posts: 11321
Joined: Thu Jul 31, 2003 2:09 pm
Windows Version: Windows 10 Pro 64
Avant Version: 2015
Default engine: Chrome
IE Version: 11
Skin: Stickers
Location: Ohio, USA
Contact:

Post by hornakapopolis » Sun Oct 24, 2004 3:02 pm

No problem... my funny funny wit doesn't translate well in text.

Or maybe I just don't have funny funny wit. :wink:

User avatar
SweetLou
Avant Guru
Avant Guru
Posts: 3897
Joined: Tue Jan 27, 2004 10:33 pm
Windows Version: Windows
Avant Version:
Location: Lakewood, Ohio USA

Post by SweetLou » Sun Oct 24, 2004 7:46 pm

hornakapopolis wrote:No problem... my funny funny wit doesn't translate well in text.

Or maybe I just don't have funny funny wit. :wink:
Marine != funny.
Beer is proof that God loves us and wants us to prosper. -Benjamin Franklin
Where's the dancing and singing monkey?

bigC
AvantGuard
AvantGuard
Posts: 7244
Joined: Thu Jan 30, 2003 10:40 pm
Windows Version: 10
Avant Version: 2016 Build 1
Default engine: Firefox
IE Version: 11
Skin: Crystal
Location: New York

Post by bigC » Thu Jan 20, 2005 7:35 pm

Another spoofstick request,
evertonian wrote:This new toolbar is available for Internet Explorer (and Firefox). It is a very useful security tool, and the sooner it is available in Avant the better.

User avatar
robc
AvantGuard
AvantGuard
Posts: 988
Joined: Fri Dec 12, 2003 3:33 pm
Windows Version: Vista Ultimate SP1
Avant Version: 11.6 Build 20
IE Version: 7
Location: Italy

Post by robc » Sun Jan 23, 2005 1:45 pm

Just to let all unsuspecting SpoofStick users know, from the NTBugTraq list:
Spoofstick (http://www.corestreet.com/spoofstick/) is a tool with
versions for both IE and Firefox. According to the description on the
website, "SpoofStick is a simple browser extension that helps users
detect spoofed (fake) websites."

Unfortunately, it is rather easy to spoof Spoofstick. A simple entry in
the users host file of an IP address with a spoofed host name will trick
it. For example, an entry in the hosts file of the following will
display http://www.google.com in the Spoofstick toolbar, but the IP address and
the site is actually http://www.cnn.com:

64.236.16.20 http://www.google.com

So, while it may report some helpful information at times, it is also
trivial to spoof it.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
William J. (Bill) Hobson
Network Administrator
Information Security Officer
Network and Computing Support Services
Texas Engineering Experiment Station

--
NTBugtraq Editor's Note:

Most viruses these days use spoofed email addresses. As such, using an Anti-Virus product which automatically notifies the perceived sender of a message it believes is infected may well cause more harm than good. Someone who did not actually send you a virus may receive the notification and scramble their support staff to find an infection which never existed in the first place. Suggest such notifications be disabled by whomever is responsible for your AV, or at least that the idea is considered.
--
Image formerly known as Image

EbayTrademe
Newbie
Newbie
Posts: 1
Joined: Tue Dec 06, 2005 5:18 am
Avant Version:

Any possibility to have the "SpoofStick' fuction?

Post by EbayTrademe » Tue Dec 06, 2005 5:23 am

Is that any possible to have the "SpoofStick' fuction plug-in on Avant Browser to stop the fishing website?

SpoofStick makes it easier to spot a spoofed website by prominently displaying only the most relevant domain information.

More info pl visit http://www.spoofstick.com/

Thanks

Regards

Kevin

Since this request has already been added to the Master Request/Suggestion List, I've merged this post with the appropriate thread. Please don't forget to search before posting. - hornakapopolis

Post Reply