Re: ~/.hosts patch

On Wed, Jun 21, 2006 at 06:38:16AM +0000, John Birrell wrote:
On Wed, Jun 21, 2006 at 08:31:36AM +0200, Harti Brandt wrote:
Wouldn't this enable the same kind of phishing attacks there are under
windows? As far as I remember there are attacks where the hosts file
(don't remember how its called under windows) is rewriten by a virus/java
script/whatever to contain a different IP address for a given hostname?
Suppose someone fakes the website of www.foobank.com, then manages to
insert www.foobank.com with the wrong IP address into ~/.hosts?

Ugh. Now that is a scary thought.

and that's why people use https and certificates!
what's the concern here ?

luigi
_______________________________________________
freebsd-current@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: ~/.hosts patch
    ... As far as I remember there are attacks where the hosts file ... (don't remember how its called under windows) ... is rewriten by a virus/java ... script/whatever to contain a different IP address for a given hostname? ...
    (freebsd-current)
  • Re: Hacked???
    ... > appeared that said "If you see this page, your hosts file ... > What folloed was a list pf steps that tell me how to edit ... > all patches for your computer from the Windows Update ... > Are the instructions legitimate or will I make matters ...
    (microsoft.public.security.virus)
  • Re: New comp. Got infected before SP2 installed.
    ... There are worms/viruses that edit the Windows XP Hosts file, ... impossible to connect to web sites for various antivirus program makers and antivirus ... I had waited to connect to the internet until ...
    (microsoft.public.windowsxp.general)
  • Re: cant sign into hotmail from IE,
    ... Did you uninstall the Messenger? ... Also..try updating your script engine: Windows Script 5.6 for Windows 2000 ... Check your HOSTS file for anything that might be blocked. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: EZ Armor question
    ... Windows 95/98/Me c:\windows\hosts ... open the hosts file with notepad or wordpad. ... making sure you dont get any updates. ... proxy option fixed a lot of stuff that was happing. ...
    (microsoft.public.security.virus)