[ot] Re: [thelist] IP obfuscation

j.d. welch so.there at showtunepink.com
Tue Feb 4 02:04:01 CST 2003


On Tuesday, February 4, 2003, at 01:53 AM, Aleem Bawany wrote:

> Using this technique and others like it your could create
> a pretty obscure URL. Quickly tell me where does this URL go:
>
> http://
> www.evolt.org%14article%4aheadline%1417%1454234%14index.html at 216.
> 119.117.224
>
> it might seem familiar to some:
> username:password at domain.com
> (the url really points to rudy's site not some evolt article)

...yeah, and all it takes to figure out where you really are is to use
wget to fetch the document (oh, look, there's the ip address, then
'host 215.119.117.224' - there's some domain names). trivial 'security'
there.

> It can get uglier, ofcourse:
> http://www.pc-help.org/obscure.htm

eew. yes. festive exercise, but useless.

> I think the URI interface needs better security.

how so?

-jd

------------------------------------------------------------------
    J.D. Welch			|    so.there at showtunepink.com
    graphic designer    	|    http://www.showtunepink.com
    web developer       	|    https://kitschparade.ath.cx
------------------------------------------------------------------




More information about the thelist mailing list