Hacked Passwords Are Over, Let the Spoofs Begin
 

About a year ago I noticed this pirate program called Zspoof, which basically fakes the referring url on htaccess and gives total access to a site.

Well, it's all over the pirate boards now, and they love it because the spoofs last a lot longer than hacked passwords which, with a few exceptions, tend to die pretty quickly.

The scariest thing is --- as far as I know --- there is no fix for Zspoof whatsoever, except dumping htaccess. A real nightmare for the content providers, among others.

woo hoo !! free porn !!

Figures. Smart Ass. I'll delete the link then. Just thought some legit webmasters might want to check to see if their site is being spoofed.

But I forgot there are so many thieves here. Fuck it.

Nigga don't hate

http://users.pandora.be/R4v3n/spoofs...of/spoofs3.txt

spoofing and the progs to do it have been around for a while....and yes there is a way to prevent it.

basically someone needs to know their target in order to spoof....if you dont publish the target then you've made it a bit harder for anyone to spoof you.
if you publish a members login on the web then dont use a members location that is easy to guess.
eventually though, if someone really wants in they will get in....most likely by carding your site and finding your members url.

Programs like this have been out there for years... it's really easy to fake the referral URL...

Yeah, I know. But I've been seeing the average Joe Blow using it more and more lately. They hardly bother with hacked passwords anymore. That was my only point.

Edit

It probably helps a little, but not much. I've seen pirates use a hacked password to get the members' location. Then, once they have the location for the spoof, it doesn't matter if the password dies quickly.

And, of course, once they post the spoof, no one needs to bother with a password again.

Protecting on referer is a bad idea anyway imho.
Because the referer is sent from the client side, the client will always be able to spoof it.
You also saw this with formmail being abused by spammers, it only relied on the referer :(

I suggest content providers to move to some other form of authentication, unless the amount of spoofers is low enough to still make a good profit, however with this 'teqnique' getting more and more known the amount of spoofers will rise..