Collaborate Disseminate
I mean if the attacker tries to ask all the open DNS resolver respond to a web server. The web server can just block its UDP ports.
If the all the DNS response go to a Authoritative Nameserver(victim), it can just drop all DNS response.
I have a question regarding your experience of TCP Sequence Prediction that I am hoping someone could help with.
I am aware of how TCP Sequence Prediction works and how the connection can be hijacked by an attacker predictin… Continue reading TCP Sequence Prediction and it’s prominence in modern systems/networks
Is there any (practical/theoretical) way to forge “IP address”?
By forging I mean feed to the website the IP you want.
Let take PHP as example:
You need to change your IP address to this IP 225.225.225.225.
In the final… Continue reading IP forgery (theories are fine)
As part of a promotional campaign, my company wants to launch a site where users (and potential users) of our product will be required to register and vote for certain choices. Depending on how successful it is this might bec… Continue reading Preventing online voter fraud
I see that many of my WordPress installs are being hit with 1000+ failed login attempts using non-existing ‘admin’ account name. The requests come from different IP’s every time, and I see IP’s such as 8.8.8.8 (google’s publi… Continue reading Brute force login attempt from spoofed IP’s
Is it possible to trace my IP address when I am chatting with others (with gtalk or Facebook)? If so, how could someone do that?
Continue reading How can I trace the IP address of person in chat?
We have an internal intranet system which is only accessible from a few internal VLANs. Our main external firewall blocks all access to the internal webserver – or rather, has no rules to allow access!
We have 100’s of branc… Continue reading IP Spoofing a threat?
Providing all legal measures are taken care of, what are some of the ways someone can spoof an email “From” field address and actually get the email to the recipient without spam filters getting in the way. The following are the ways I cur… Continue reading Spoofing email From address
I’m not security literate, and if I was, I probably wouldn’t be asking this question. As a regular tech news follower, I’m really surprised by the outrage of Anonymous (hacker group), but as a critical thinker, I’m unable to … Continue reading Why is it difficult to catch "Anonymous" or "Lulzsec" (groups)?
I’m under the impression that if all the ISPs were required to filter on the source IP address of all outbound packets, that spoofing would be reduced considerably.
Are any ISPs implementing this practice?
Should they?
… Continue reading Why don’t ISPs filter on source address to prevent spoofing?