From the course: Threat Modeling: Spoofing In Depth

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Spoofing a person on a website

Spoofing a person on a website

From the course: Threat Modeling: Spoofing In Depth

Start my 1-month free trial

Spoofing a person on a website

- If you want to be Little Red Riding Hood on Twitter, you're way too late. There are dozens of accounts with variations on that name. Some websites have limits on overlap between display names. Now Facebook has some controls over names, but frankly, they don't work very consistently, and when they are consistent, they don't deal with the fact that there are a lot of John Smiths in the world. They're better at catching obvious fakery, which is okay until you realize that there probably are parents who really name their kids after fruits or seasons or. I hope you see where this is going. We expect that the presentation of a person on a website relates to the actual person. We sort of expect the name displayed to match someone's government name, but if I say Louise Ciccone, you have no idea that I'm talking about Madonna. The ways in which we judge authenticity on a website are entirely under control of the website. Photos are easily copied, names are editable. I might pretend to be…

Contents