It would be a kindness...
POSTED BY: Jstn
UPDATED: Tuesday, February 26, 2008 22:24
VIEWED: 19890
PAGE 12 of 12
Cookie removal and IP spoofing would probably allow you to vote continuously.
NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
Quote:
Cookie removal and IP spoofing would probably allow you to vote continuously.
There's no such thing as IP spoofing. At least not for TCP/IP spoofing (which is what folks usually mean when they're talking about IP spoofing).
The IP protocol operates at layer 3 of the OSI model. It's a 'connectionless' model, meaning there's no information regarding transaction state, used to route packets on a network. Additionally, there is no method to acknowledge a packet's proper delivery. IP can be thought of as a routing wrapper for layer 4 (transport) of the OSI model, which contains the Transmission Control Protocol (TCP). Unlike IP, participants in a TCP session must first build a connection. This is done via a 3-way, two roundtrips handshake (SYN-SYN/ACK-ACK) that continually update one another, via sequences and ACKnowledgements. The client first sends a SYN packet. The server then responds with its own SYN/ACK, acknowledging the client's SYN. This acknowledgement is sent back to the source IP of the incoming packet. Which ACK, if the IP were faked, would never reach the faker. So, things end right there.
Back in the early day, it was relatively easy to spoof a TCP/IP connection, using sequence number prediction. These days, however, every OS uses fair decent random sequence number generators, making predicting sequence numbers as good as totally impossible. So, basically, the Jericho folks could spoof incoming SYN packets (which is really what a spoofed IP attack is). But beyond that, since HTTP goes over TCP/IP as well, of course, there's no way they could establish (not just set up) valid TCP/IP sessions with the voting server.
--
"Mei-mei, everything I have is right here." -- Simon Tam
NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
OK, so I dated myself. Should have just said spoofing. The implication that they are getting around the vote restrictions (once every six hours), implies succcess at getting the host to believe that the same voter, is actually a different voter, as a large number of votes are cast via a single session.
The easiest way to uncover the secret is for someone to hang out at the Jericho boards or listservs until someone brags. These are fans we are dealing with...
NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
Quote:
Originally posted by asarian:Quote:
Cookie removal and IP spoofing would probably allow you to vote continuously.
There's no such thing as IP spoofing. At least not for TCP/IP spoofing (which is what folks usually mean when they're talking about IP spoofing).
The IP protocol operates at layer 3 of the OSI model. It's a 'connectionless' model, meaning there's no information regarding transaction state, used to route packets on a network. Additionally, there is no method to acknowledge a packet's proper delivery. IP can be thought of as a routing wrapper for layer 4 (transport) of the OSI model, which contains the Transmission Control Protocol (TCP). Unlike IP, participants in a TCP session must first build a connection. This is done via a 3-way, two roundtrips handshake (SYN-SYN/ACK-ACK) that continually update one another, via sequences and ACKnowledgements. The client first sends a SYN packet. The server then responds with its own SYN/ACK, acknowledging the client's SYN. This acknowledgement is sent back to the source IP of the incoming packet. Which ACK, if the IP were faked, would never reach the faker. So, things end right there.
Back in the early day, it was relatively easy to spoof a TCP/IP connection, using sequence number prediction. These days, however, every OS uses fair decent random sequence number generators, making predicting sequence numbers as good as totally impossible. So, basically, the Jericho folks could spoof incoming SYN packets (which is really what a spoofed IP attack is). But beyond that, since HTTP goes over TCP/IP as well, of course, there's no way they could establish (not just set up) valid TCP/IP sessions with the voting server.
--
"Mei-mei, everything I have is right here." -- Simon Tam
What did he say?
LOLOLOLOLOLOL
http://www.savesurface.com/phpBB2/index.php
NOTIFY: N | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
Quote:
Originally posted by Suasor:
OK, so I dated myself. Should have just said spoofing. The implication that they are getting around the vote restrictions (once every six hours), implies succcess at getting the host to believe that the same voter, is actually a different voter, as a large number of votes are cast via a single session.
Or, they simply bested us. Could be they're just better organized. They're believers. Intelligent, methodical, and devout in their belief that voting in their show is the right thing to do.
--
"Mei-mei, everything I have is right here." -- Simon Tam
NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
Quote:
Originally posted by asarian:
They're believers. Intelligent, methodical, and devout in their belief that voting in their show is the right thing to do.
Good thing we are too.
---------------------------------------------
Check out http://www.americasfunniesttshirts.com for hilarious shirts at a great price.
NOTIFY: N | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
Do the impossible and you are mightly...
They're ahead 202 to 174, so a lot of us are still trying. We need someone, with some spare time, to visit their message boards and see if they are doing the impossible, or there are just more of them showing up at TVTally.
Quote:
Originally posted by asarian:Quote:
Originally posted by Suasor:
OK, so I dated myself. Should have just said spoofing. The implication that they are getting around the vote restrictions (once every six hours), implies succcess at getting the host to believe that the same voter, is actually a different voter, as a large number of votes are cast via a single session.
Or, they simply bested us. Could be they're just better organized. They're believers. Intelligent, methodical, and devout in their belief that voting in their show is the right thing to do.
--
"Mei-mei, everything I have is right here." -- Simon Tam
NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME