Saturday, February 23, 2008

"SPOOFING" should it be banned ??

"Spoof" was a game involving trickery and nonsense that was invented by an English comedian, Arthur Roberts, prior to 1884, when it is recorded as having been "revived." Webster's defines the verb to mean (1) to deceive or hoax, and (2) to make good-natured fun of.
On the Internet, "to spoof" can mean:
1) To deceive for the purpose of gaining access to someone else's resources (for example, to fake an Internet address so that one looks like a certain kind of Internet user)
2) To simulate a communications protocol by a program that is interjected into a normal sequence of processes for the purpose of adding some useful function
3) To playfully satirize a Web site.

Spoofing attacks primarily include
Email spoofing·
SMS spoofing·
IP spoofing·
Web spoofing.

E-mail spoofing is a term used to describe fraudulent email activity in which the sender address and other parts of the email header are altered to appear as though the email originated from a different source. E-mail spoofing is a technique commonly used for spam e-mail and phishing to hide the origin of an e-mail message.

SMS spoofing is emerging as a menace and might hamper the growth of the mobile industry. For the uninitiated, with SMS spoofing a cyber criminal can send an SMS to anyone on the cell phone without touching it. This also implies that if the person (who receives the message) goes to the reply mode of the phone and writes any reply text after receiving the spoofed SMS, it will again come back to the same person. This has serious security ramifications and the scope for misuse is enormous.

A technique used to gain unauthorized access to computers, whereby the intruder sends messages to a computer with an IP address indicating that the message is coming from a trusted host. To engage in IP spoofing, a hacker must first use a variety of techniques to find an IP address of a trusted host and then modify the packet headers so that it appears that the packets are coming from that host.
Newer routers and firewall arrangements can offer protection against IP spoofing.

Web spoofing is the act of secretly tricking your Web browser into talking to a different Web server than you intend. How? By attacking the DNS (domain name system) that maps the "www.site.com" in a URL to a network address, or by modifying a Web page to have a bad URL, or by tricking your browser as it interprets CGI data, JavaScript, etc.

There are seemingly 21 ‘cyber’ issues ranging from Malicious code, Cyber Terrorism to spamming and spoofing, overtly it may seem to cover all aspects of the new digital era but a closer and detailed look shows quite the contrary, allow me to explain, as novice trying to decipher Zahid’s excellent explanation (For those bored by the technicality head down to the Call for Action section at the bottom)
Practically in all issues the government has gone the extra mile to reinvent a new definition, significantly deviating from the internationally accepted norms leaving more grey areas for confusion / exploitation within the law
There seems to be an elaborate play of words within the document, which does nothing, but allow room for the regulating body (FIA) to confuse and entrap the innocent people, a ‘book ‘em up’ charge sheet on all counts.

Should It Be Banned ??
Although one of the bad aspects of banning spoofing is that the privacy of any person or we can say the anonymity is lost, I think that spoofing should be banned . Spoofing should be a part of cyber crime law seeing its dangerous aspects and effects.

References :
[1] http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci213039,00.html
[2] http://en.wikipedia.org/wiki/E-mail_spoofing
[3] http://www.crime-research.org/news/19.08.2005/1440/
[4] http://www.washington.edu/computing/windows/issue22/spoofing.html
[5] http://dbtb.org/2007/09/08/draconian-cyber-crime-law-in-pakistan/
[6] http://www.webopedia.com/TERM/I/IP_spoofing.htm

No comments: