Page 1 of 1

Spoofstick

Posted: Sat Sep 25, 2004 4:55 pm
by derrillfox
Spoofstick - http://www.realtimecredentials.com/spoofstick/ - This program is a great security feature and needs to be added.

Posted: Sat Sep 25, 2004 4:57 pm
by ftboomer
I heartily agree. I use this in IE when I'm not sure where the re-direct is taking me. It would be a GREAT addition to Avant.

Posted: Sun Sep 26, 2004 12:51 am
by hornakapopolis
I've checked it out, but never ran into a situation where I've needed it.

But, with all of the crummy, useless, "search engine clone" toolbars out there, this would be a incredibly useful one. Especially for those that aren't necessarily "net savvy"

I'll add my support.

Posted: Sat Oct 23, 2004 9:31 pm
by bigC
Wasn't this spoofing vulnerability fixed in a recent IE security patch?

Posted: Sat Oct 23, 2004 10:09 pm
by LDMartin1959
Wasn't this spoofing vulnerability fixed in a recent IE security patch?
Well, the stick is not just useful against the spoof vulnerability that it was designed for, but also for non-savvy users (and idiot "law enforcement" people and idiot "managers" at web-hosting services) who do not realize (or refuse to understand) that an address such as < http://signin.ebay.com.lzve.us/index.html > isn't really EBAY just 'cuz it has 'ebay' buried in the address.

LDMartin1959

Posted: Sun Oct 24, 2004 1:51 am
by hornakapopolis
LDMartin1959 wrote:< http://signin.ebay.com.lzve.us/index.html > isn't really EBAY just 'cuz it has 'ebay' buried in the address.

LDMartin1959
Hey!

Just wanted to let you know that your link doesn't work. And eBay is up because I just went there... and you're clearly linking to eBay.


:wink:

Posted: Sun Oct 24, 2004 12:12 pm
by LDMartin1959
Just wanted to let you know that your link doesn't work. And eBay is up because I just went there... and you're clearly linking to eBay.
You are correct in that the link is not working. That is because after many hours of frustration, phone calls and e-mail I finally got the site pulled (no thanks to any of the law enforcement agencies who are supposed to be dealing with this sort of thing: "I'm sorry, if you were not a victim of fraud you can not file a complaint about it." Based on that interpretation of the law, am I also to take it that only person who can file a complaint about a homicide is the victim?)

You are NOT correct, however, in that it was NOT a link to eBay. It was in fact a phising site, hosted by Yahoo, owned by a guy in Miami, Florida. It was designed to harvest your eBay user id and password as well as your credit card number (and the pin number you use to access your account via ATM's).

The fact that it had eBay in the address was a deception designed to give the website an added air of authenticity for the folks who were told to check the address in their browser to make sure it 'matched' the site they thought they were visiting ('If it says ebay in the address bar, you are on the ebay website'). Since ebay appeared in the address, people would take it to be an authentic ebay website, when in fact the actual website was < http://www.lzve.us >.

Posted: Sun Oct 24, 2004 1:31 pm
by Sergei
(There was a winking smiley at the bottom of the previous post, LDMartin1959.)

And you ATN PIN too? Anyone who gives that out without smelling a rat had better not be on eBay anyway...

Posted: Sun Oct 24, 2004 2:05 pm
by LDMartin1959
I saw the wink but wasn't sure what he was winking about: I took his message as being serious. Sorry, hornakapopolis (is that horna, for short?), I missunderstoond. It is just too dang early in the morning for me to be up and trying to think. :cry:

Posted: Sun Oct 24, 2004 3:02 pm
by hornakapopolis
No problem... my funny funny wit doesn't translate well in text.

Or maybe I just don't have funny funny wit. :wink:

Posted: Sun Oct 24, 2004 7:46 pm
by SweetLou
hornakapopolis wrote:No problem... my funny funny wit doesn't translate well in text.

Or maybe I just don't have funny funny wit. :wink:
Marine != funny.

Posted: Thu Jan 20, 2005 7:35 pm
by bigC
Another spoofstick request,
evertonian wrote:This new toolbar is available for Internet Explorer (and Firefox). It is a very useful security tool, and the sooner it is available in Avant the better.

Posted: Sun Jan 23, 2005 1:45 pm
by robc
Just to let all unsuspecting SpoofStick users know, from the NTBugTraq list:
Spoofstick (http://www.corestreet.com/spoofstick/) is a tool with
versions for both IE and Firefox. According to the description on the
website, "SpoofStick is a simple browser extension that helps users
detect spoofed (fake) websites."

Unfortunately, it is rather easy to spoof Spoofstick. A simple entry in
the users host file of an IP address with a spoofed host name will trick
it. For example, an entry in the hosts file of the following will
display http://www.google.com in the Spoofstick toolbar, but the IP address and
the site is actually http://www.cnn.com:

64.236.16.20 http://www.google.com

So, while it may report some helpful information at times, it is also
trivial to spoof it.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
William J. (Bill) Hobson
Network Administrator
Information Security Officer
Network and Computing Support Services
Texas Engineering Experiment Station

--
NTBugtraq Editor's Note:

Most viruses these days use spoofed email addresses. As such, using an Anti-Virus product which automatically notifies the perceived sender of a message it believes is infected may well cause more harm than good. Someone who did not actually send you a virus may receive the notification and scramble their support staff to find an infection which never existed in the first place. Suggest such notifications be disabled by whomever is responsible for your AV, or at least that the idea is considered.
--

Any possibility to have the "SpoofStick' fuction?

Posted: Tue Dec 06, 2005 5:23 am
by EbayTrademe
Is that any possible to have the "SpoofStick' fuction plug-in on Avant Browser to stop the fishing website?

SpoofStick makes it easier to spot a spoofed website by prominently displaying only the most relevant domain information.

More info pl visit http://www.spoofstick.com/

Thanks

Regards

Kevin

Since this request has already been added to the Master Request/Suggestion List, I've merged this post with the appropriate thread. Please don't forget to search before posting. - hornakapopolis