But surely that's email only - not web pages?



-----Original Message-----
From: Michael Dinowitz [mailto:[EMAIL PROTECTED]
Sent: Friday, 3 October 2003 2:49 p.m.
To: CF-Talk
Subject: Re: security flaw in web services



You can fake the reported IP. I had mentioned this as a possible spam thing
and
I've actually seen it in the wild with spam from 2 different places.

> > checking amount of attempts per IP - ip can be forged
>
> You can't fake an IP and expect TCP/IP to work.
>
> Jochem



  _____  

[Todays
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to