[4565] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: Anonymizer / Web Spoof

daemon@ATHENA.MIT.EDU (Gretchin Lair)
Fri Feb 21 21:14:22 1997

Date: Fri, 21 Feb 1997 16:25:10 -0700 (MST)
From: Gretchin Lair <gretchin@uscolo.edu>
To: goat <babygoat@earthlink.net>
Cc: www-security@ns2.rutgers.edu
In-Reply-To: <330DA05E.5BA1@earthlink.net>
Errors-To: owner-www-security@ns2.rutgers.edu

On Fri, 21 Feb 1997, goat wrote:

> I recently saw a post on this list or Sneakers that described an attack
> called a web spoof.  There is a paper on it at security and hackerscene.
> I was wondering is what the anonymizer does a "Web Spoof" it sounds just
> like the attack described in the paper except for the fact that the user
> is aware of what is going on and the user starts it themself.  
>                             goat
> 

anonymizer is a web spoof, albeit a voluntary one. the zippy filter
(http://www.metahtml.com/apps/zippy/) is also a voluntary web spoof, and
it's a very funny one. the good thing about web spoofs is that they show
up in referal logs like a sore thumb.

gl.


home help back first fref pref prev next nref lref last post