Not really the case. With Blind Spoofing you need to have access to a server setup specifically for illegal activity and be technically savvy enough to intercept mid stream packet transfer (MTM spoofing). To be truly blind, you are a pro hacker or work at or have access to an ISP's PRI trunk id's in order to intercept the packet flow address' within them. The only other way is to send random IP address' to a machine and hope one matches up. There is illegal software that can do this, but the good ones are very expensive and highly illegal. You don't buy it at Comp USA.

Further. IP spoofing is used to hack into and infiltrate a server network or desktop for ID theft, information theft and virus introduction, not to post on a lameass noob message board.

IP addresses will easily lead you to the host iSP (whois), you need a court order to approach the ISP for the user. If willful intent of libel, slander or perjury is proven, that court order will be readily granted. Below is taken from a Telecom Dictionary.

Non-Blind Spoofing

This type of attack takes place when the attacker is on the same subnet as the victim. The sequence and acknowledgement numbers can be sniffed, eliminating the potential difficulty of calculating them accurately. The biggest threat of spoofing in this instance would be session hijacking. This is accomplished by corrupting the datastream of an established connection, then re-establishing it based on correct sequence and acknowledgement numbers with the attack machine. Using this technique, an attacker could effectively bypass any authentication measures taken place to build the connection.

Blind Spoofing

This is a more sophisticated attack, because the sequence and acknowledgement numbers are unreachable. In order to circumvent this, several packets are sent to the target machine in order to sample sequence numbers. While not the case today, machines in the past used basic techniques for generating sequence numbers. It was relatively easy to discover the exact formula by studying packets and TCP sessions. Today, most OSs implement random sequence number generation, making it difficult to predict them accurately. If, however, the sequence number was compromised, data could be sent to the target. Several years ago, many machines used host-based authentication services (i.e. Rlogin). A properly crafted attack could add the requisite data to a system (i.e. a new user account), blindly, enabling full access for the attacker who was impersonating a trusted host.

Man In the Middle Attack

Both types of spoofing are forms of a common security violation known as a man in the middle (MITM) attack. In these attacks, a malicious party intercepts a legitimate communication between two friendly parties. The malicious host then controls the flow of communication and can eliminate or alter the information sent by one of the original participants without the knowledge of either the original sender or the recipient. In this way, an attacker can fool a victim into disclosing confidential information by “spoofing” the identity of the original sender, who is presumably trusted by the recipient.

Nice try...but those who post lies are easily found.

quote:

---

Originally posted by: Network guru
"Of course, if the address were 'spoofed', it would not have matched the address that tED was posting from in the first place (how would anyone know what it was)?

Could easily have been sniffed.

 

 Also, ISPs have some records that could indicate who and who was not a busy little beaver at the time.

Still wouldn't prove that the IP was not spoofed.

 

Lastly - is anybody going to believe that someone went through all that effort to 'spoof' an address just to post a message?

The effort isn't really that great, especially for some enterprising high school kid with too much time on his hands trying to stir up trouble.

 

---

I suppose Ted could hope to get some newbie judge who wasn't already exposed to his troublemaking obnoxious behavior in the past--