Posted by Jerry Stuckle on 01/22/08 13:28

Willem Bogaerts wrote:
>> Not the way TCP/IP works. You can send up to 7 packets before an ACK is
>> required by the sender. This is all done by the transport layer, and
>> the web server has no idea what's going on.
>
> Stupid question maybe, but can such a signal be sent anyway or does it
> require some part of the question it answers to? If it can be sent
> anyway and be recognized as valid, you would still be able to send data
> and have the returns sent to the wrong destination.
>
> As you have guessed, I did not study the TCP/IP protocol.
>
> Regards,

With the correct hacker tools, it can be done. It's not easy, but it
could be useful in certain circumstances.

It's not being done because it's of limited use. If you can't get any
data back, it doesn't do a lot of good.

But also, fortunately, it's beyond the ability of most hackers. It
takes an intimate knowledge of the TCP/IP protocol and the weaknesses in
it (and yes, there are some). And it requires the ability to exploit
those weaknesses. You won't be able to do it with the TCP/IP stack in
most systems; you'll have to build your own packets. That requires a
fair amount of code.

So yes, it can be done. But it's difficult, and there are much easier
ways to get the job done, i.e. anonymous proxies, bot nets, etc.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

[Back to original message]