From owner-freebsd-current@FreeBSD.ORG Wed Jun 21 06:38:21 2006 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8C9AC16A474; Wed, 21 Jun 2006 06:38:21 +0000 (UTC) (envelope-from jb@what-creek.com) Received: from what-creek.com (what-creek.com [66.111.37.70]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4B49E43D48; Wed, 21 Jun 2006 06:38:21 +0000 (GMT) (envelope-from jb@what-creek.com) Received: by what-creek.com (Postfix, from userid 102) id 7732F78C1D; Wed, 21 Jun 2006 06:38:16 +0000 (GMT) Date: Wed, 21 Jun 2006 06:38:16 +0000 From: John Birrell To: Harti Brandt Message-ID: <20060621063816.GA32889@what-creek.com> References: <4498D108.90907@rogers.com> <20060621053007.GA3320@odin.ac.hmc.edu> <4498DF20.8020803@rogers.com> <1150870137.78122.14.camel@spirit> <20060621082734.Q24109@beagle.kn.op.dlr.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20060621082734.Q24109@beagle.kn.op.dlr.de> User-Agent: Mutt/1.4.2.1i Cc: freebsd-current@freebsd.org Subject: Re: ~/.hosts patch X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Jun 2006 06:38:21 -0000 On Wed, Jun 21, 2006 at 08:31:36AM +0200, Harti Brandt wrote: > Wouldn't this enable the same kind of phishing attacks there are under > windows? As far as I remember there are attacks where the hosts file > (don't remember how its called under windows) is rewriten by a virus/java > script/whatever to contain a different IP address for a given hostname? > Suppose someone fakes the website of www.foobank.com, then manages to > insert www.foobank.com with the wrong IP address into ~/.hosts? Ugh. Now that is a scary thought. Please kill this patch ASAP. -- John Birrell