Re:Bitsquatting Windows.com
by jyr0s on Thursday March 04, 2021 @08:43AM
(#26342262)
aren't Ethernet frames CRC'd? Are there other checksums down the call stack, or up the stack at the other end, that would reject such bit flips in the raw data?
[ Parent
| on HN ]
Yes, Ethernet frames are CRC'd but some (most?) memory isn't. The web address is bit-flipped in memory, and then the network stack generates a valid Ethernet frame using the already corrupted address.