4 ms·
IP addresses are easy to spoof. Did Mocality try to figure out if it was really Google's IPs, or just someone faking them?
by bh42222 15y ago
IP addresses are easy to spoof. Did Mocality try to figure out if it was really Google's IPs, or just someone faking them?
- jrockway 15y agoIP addresses are not easy to spoof. Most ISPs do egress filtering, and most TCP stacks use cryptographically-secure sequence number generation. This makes forging HTTP traffic nearly impossible in practice.
- brazzy 15y agoIP addresses are not easy to spoof if you want receive an answer to your packets. In fact, they're pretty much impossible to spoof unless you control a router between the target and the IP address you want to spoof (though that's not really spoofing anymore at that point, more like capturing).
- lukeschlather 15y agoHow hard is it to bribe a sysadmin on the backbone routers in Kenya? Better yet, how hard is it to become a sysadmin on the backbone routers in Kenya? Of course there are a dozen Google services that could let you serve a webpage from some Google IP, so router-level spoofing seems a bit farfetched for this scenario.
- prostoalex 15y ago>> Better yet, how hard is it to become a sysadmin on the backbone routers in Kenya? Pretty damn hard http://jobsearch.monster.com/search/sysadmin-on-the-backbone-routers_5?q=IP-Spoofing&where=kenya http://jobsearch.monster.com/search/sysadmin-on-the-backbone...
- fhars 15y agoIP adresses are only easy to spoof if you do not intend to receive any ACK packages (or any other reply from the target, like web pages with phone numbers on them). For everything else you need the cooperation of a rogue ISP on the shortest path between the target and the legitimate owner of the address block, or a peering with well connected networks that allows you to mess with BGP, which would be hard to hide and probably cost you your peering agreements.