Quote:
Originally Posted by BetBlowWhistler
What do you think would happen if you set up a web site that re-directed you to another port (other than 80)?
|
Exactly, this is my point. It does not even need to redirect, it just needs to be set up on port X. Anything can link to it (email, website etc). Port numbers are just a "recommendation", if you want, of which port (which is just a suffix really on the IP Packet) to send different types of protocols down (e.g.80, 443 we are all familiar with, but 20 & 21 for FTP etc). There is nothing to stop you using ANY port for ANY protocol as far as I am aware (some firewalls may flag this however).
So the only way phorm anti-phishing can work is to scan all ports and analyse and recognise what protocols are being used.
Otherwise the anti-phish system will fail. If a phisher can circumvent detection in any way - they will.
This is so simple to circumvent - its embarrassing!
Unless..... No they cant be can they.... Scanning all ports???????? Nah!