Posted: Sat Sep 25, 2004 4:55 pm
Spoofstick - http://www.realtimecredentials.com/spoofstick/ - This program is a great security feature and needs to be added.
Avant Browser community forum
Well, the stick is not just useful against the spoof vulnerability that it was designed for, but also for non-savvy users (and idiot "law enforcement" people and idiot "managers" at web-hosting services) who do not realize (or refuse to understand) that an address such as < http://signin.ebay.com.lzve.us/index.html > isn't really EBAY just 'cuz it has 'ebay' buried in the address.Wasn't this spoofing vulnerability fixed in a recent IE security patch?
Hey!LDMartin1959 wrote:< http://signin.ebay.com.lzve.us/index.html > isn't really EBAY just 'cuz it has 'ebay' buried in the address.
You are correct in that the link is not working. That is because after many hours of frustration, phone calls and e-mail I finally got the site pulled (no thanks to any of the law enforcement agencies who are supposed to be dealing with this sort of thing: "I'm sorry, if you were not a victim of fraud you can not file a complaint about it." Based on that interpretation of the law, am I also to take it that only person who can file a complaint about a homicide is the victim?)Just wanted to let you know that your link doesn't work. And eBay is up because I just went there... and you're clearly linking to eBay.
Marine != funny.hornakapopolis wrote:No problem... my funny funny wit doesn't translate well in text.
Or maybe I just don't have funny funny wit.
evertonian wrote:This new toolbar is available for Internet Explorer (and Firefox). It is a very useful security tool, and the sooner it is available in Avant the better.
Spoofstick (http://www.corestreet.com/spoofstick/) is a tool with
versions for both IE and Firefox. According to the description on the
website, "SpoofStick is a simple browser extension that helps users
detect spoofed (fake) websites."
Unfortunately, it is rather easy to spoof Spoofstick. A simple entry in
the users host file of an IP address with a spoofed host name will trick
it. For example, an entry in the hosts file of the following will
display http://www.google.com in the Spoofstick toolbar, but the IP address and
the site is actually http://www.cnn.com:
So, while it may report some helpful information at times, it is also
trivial to spoof it.
William J. (Bill) Hobson
Information Security Officer
Network and Computing Support Services
Texas Engineering Experiment Station
NTBugtraq Editor's Note:
Most viruses these days use spoofed email addresses. As such, using an Anti-Virus product which automatically notifies the perceived sender of a message it believes is infected may well cause more harm than good. Someone who did not actually send you a virus may receive the notification and scramble their support staff to find an infection which never existed in the first place. Suggest such notifications be disabled by whomever is responsible for your AV, or at least that the idea is considered.