(Topic ID: 145690)

Pinballlife.com

By maxwell

8 years ago


Topic Heartbeat

Topic Stats

  • 307 posts
  • 71 Pinsiders participating
  • Latest reply 8 years ago by Wolfmarsh
  • Topic is favorited by 8 Pinsiders

You

Topic Gallery

View topic image gallery

update.jpg
rick-james-cold-blooded-300x299.jpg
java_installed_on_my_desk.jpg
toooooonnnnnnnny.jpg
HTP.gif
7a7b83bb-999b-438a-8cdf-1e5f350b2c21.jpg
yahoo.jpg
Java.jpg
haxor.jpg
hacked2.png
science-dog1.jpg
image.jpg
image.png
expert.jpg
litter.jpg
Computer_Buttons.jpg

You're currently viewing posts by Pinsider sheprd.
Click here to go back to viewing the entire thread.

#169 8 years ago

So, there is another approach to avoiding getting infected or phished by a look-a-like sites. Avoid going to the site altogether. PCs use DNS to resolve friendly names (URLs) to IP addresses. Type in the wrong URL, you go to the wrong IP. Before your PC goes out to a DNS server to resolve the IP, it can look locally on your PC in a HOSTS file to see if the requested URL is listed there. If it finds it, it will use that file to resolve the IP and skip the DNS lookup.

So, if you put the bad URL in your host file, you can decide where your browser will go. Set it to go to the real address, or set it to go to the PC loopback address 27.0.0.1. Setting it to go to loopback is called cratering... basically the request goes into a crater (nowhere).

This works so well that many lists of know look-a-like sites are maintained (host files) and are available for people to use for free. This effectively blocks double-click ads, etc.

Here is a link to more info: http://winhelp2002.mvps.org/hosts.htm

Not all bad sites will be known. For that reason, disabling the various apps mentioned in the post can help reduce your attack surface. For people that use corporate provided PCs, you don't always have the ability to disable everything. Cratering can help, especially if you know the bad URL as in the case of the original problem statement.

Mac

You're currently viewing posts by Pinsider sheprd.
Click here to go back to viewing the entire thread.

Reply

Wanna join the discussion? Please sign in to reply to this topic.

Hey there! Welcome to Pinside!

Donate to Pinside

Great to see you're enjoying Pinside! Did you know Pinside is able to run without any 3rd-party banners or ads, thanks to the support from our visitors? Please consider a donation to Pinside and get anext to your username to show for it! Or better yet, subscribe to Pinside+!


This page was printed from https://pinside.com/pinball/forum/topic/pinballlifecom?tu=sheprd and we tried optimising it for printing. Some page elements may have been deliberately hidden.

Scan the QR code on the left to jump to the URL this document was printed from.