 Number 267 - August 2005 |
|
| SpoofStick | |
|
Browse freely but carry a SpoofStick | |
|
What Is SpoofStick? SpoofStick is a simple browser extension that helps users detect spoofed (fake) websites. A spoofed website is typically made to look like a well-known, branded site (like ebay.com or citbank.com) with a slightly different or confusing URL. The attacker then tries to trick people into going to the spoofed site by sending out fake email messages or posting links in public places - hoping that some percentage of users won't notice the incorrect URL and give away important information. The practice is known as "phishing". SpoofStick makes it easier to spot a spoofed website by prominently displaying only the most relevant domain information. It's not a comprehensive solution, but it's a good start. For example, if you're on the following URL (this is a real,legitimate eBay URL): http://signin.ebay.com/aw-cgi/eBay:ISAPI.dll? SignIn&UsingSSL=0&pUserId=&ru=http%3A%2F% 2Fcontact.ebay.com%2Fws1%2FeBayISAPI.dll% 3FShowCoreAskSellerQuestion%26requested% 3Ddominicsmusic%26de%3Doff%26iid% 3D3711129021%26frm%3D284%26acceptcookie% 3DO%26Ioginconfirmed%3DO%26redirect%3DO% 26pass%3D%7B_pass_%7D%26userid%3D&pp=p ass&co_partnerid=2&pageType=711" Spoofstick will say: "You're on ebay.com". |
If you get fooled by going to a spoofed site, for example, http://signin.ebay:.com@10.19.32.4/ (a "spoof" example used by eBay in their customer outreach), Spoofstick will say: "You're on10.19.32.4" You can customize the color and size of the SpoofStick display to suit your tastes and make it harder for a fake site to try to "spoof" SpoofStick with a static graphic. SpoofStick contains no adware, spyware, nagware or other unhealthy additives. For Example: If you have SpoofStick installed and log onto the CoreStreet site, you will see the following on your screen 
P.S. One related site vistor commented that he found that SpoofStick will also work with Mozilla. He said to just folow installation directions. |
|
Number 267 - August 2005
|
|