[ot] Re: [thelist] IP obfuscation

Aleem Bawany aleem.bawany at utoronto.ca
Tue Feb 4 01:52:01 CST 2003


> hmm. i guess that's sort of clever, but what's the point
> of doing it? is there a real value that i'm missing, or
[...]

I don't see the point either, other than it being compact
which is kind of useless.

> is it just "look at this crazy thing i can do in
> javascript?" i mean, it doesn't obscure the ip
> particularly well if you know what you're doing anyway...

Using this technique and others like it your could create
a pretty obscure URL. Quickly tell me where does this URL go:

http://www.evolt.org%14article%4aheadline%1417%1454234%14index.html@216.
119.117.224

it might seem familiar to some:
username:password at domain.com
(the url really points to rudy's site not some evolt article)

replacing the dotted notation with the integer and adding on more stuff
after it would make the domain look just like the one you see on hotmail
while checking mail :p (infact the url could be so long that it goes
out of view from the address bar).

It can get uglier, ofcourse:
http://www.pc-help.org/obscure.htm

I think the URI interface needs better security.

aleem

[ http://members.evolt.org/aleem/ ]




More information about the thelist mailing list