Subscribe to Windows IT Pro

 

Get Newsletters

  • Get the Latest News
  • Product Updates
  • Helpful Tricks
  • Productivity Tips

Subscribe Now!

November 01, 2004 12:00 AM

SpoofStick: the Good, the Bad, and the Ugly

Windows IT Pro
InstantDoc ID #44383
Rating: (0)

I heard about a tool called SpoofStick, which is a browser extension for Internet Explorer and Firefox. The good thing about this tool is that it shows you the real URL of the site you're visiting. The tool is designed to help prevent people from falling victim (the bad part) to URL spoof attacks.

The ugly part is that during installation of SpoofStick all instances of Firefox 1.0PR are immediately shut down without so much as any warning, not to mention a prompt to ask if it's all right to do so. I think this is due to a bug because the first time I tried to installed SpoofStick it didn't install itself. I had to try to reinstall it again to get it work with Firefox and when I performed the second installation it didn't close the browser, but instead showed a message in the Extensions dialog that the installation would be completed after Firefox was restarted.

This bug is an ugly problem because, for example, if you had a couple of instances of Firefox open with a dozen or more tabs open in those instances and you hadn't bookmarked the pages yet then too bad. You'll suddenly find yourselves relegated to searching through mounds of browsing history references to find the URLs again, assuming you have history enabled and the references haven't aged out of it yet.

I wrote to the makers of SpoofStick who told me:

"I think that SpoofStick installation behavior is controlled more by how FireFox deals with extensions than with any code specific to SpoofStick. I expect these issues to be fixed by the FireFox team as they release the final version of the browser.

We'll take a look through the code to see if there's anything that we can do on the SpoofStick side to make this process easier and to make sure it's not actually a bug."


The question remains whether this behavior is due to a bug in SpoofStick or a bug in Firefox 1.0PR. I haven't had problems with any other Firefox extensions, so it'll be interesting to learn where the problem actually resides.

Related Content:

ARTICLE TOOLS

Comments
    There are no comments to display. Be the first one!
You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

advertisement

White Papers

Get your Windows 7 deployment off to the right start by implementing PC lockdown. A locked-down environment is easier and cheaper to support since users are less likely to make unnecessary changes to the core system configuration - read more here!

Essential Guides

Is your iSCSI "lossy"? The reality is that most off-the-shelf Ethernet hardware deployed for iSCSI can lose packets, resulting in slow performance or application downtime. Learn how to assess your current iSCSI infrastructure and engineer an advanced iSCSI SAN infrastructure.

Web Seminars

What's the best way to keep your network safe from malware? In this web seminar, security expert Greg Shields suggests an alternative method to the traditional blacklisting approach that is common with anti-virus and anti-malware solutions.

eLearning Series

We bring the experts direct to you to share their real-world perspective and expertise. During each event, three sessions stream in real time, so you can learn, ask questions, and get solutions.
Upcoming event: Getting the Most with Exchange 2010 with Paul Robichaux

Subscribe to Windows IT Pro!

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.