[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ale] [OT]How does Android pull off url "spoofing"?
- Subject: [ale] [OT]How does Android pull off url "spoofing"?
- From: ale_nospam at fayettedigital.com (Jim Lynch)
- Date: Sat, 17 Aug 2013 13:25:53 -0400
- In-reply-to: <CALyjPCFz8_LOL7tXxijC5AXH_hn48HXmJOKXE38st70NzXW+=Q@mail.gmail.com>
- References: <[email protected]> <CALyjPCFz8_LOL7tXxijC5AXH_hn48HXmJOKXE38st70NzXW+=Q@mail.gmail.com>
On 08/17/2013 01:11 PM, Sean McNealy wrote:
> Application layer redirect I'd guess. That would mean when you're
> thinking, "My network doesn't work like this," you're right. You
> probably do connect to airdroid.com <http://airdroid.com> and get an
> HTTP 302 to the phone's IP. The phone app could have already sent the
> local address to their service.
>
> Now how would it associate your connection to your phone's address?
> I'm surprised there's no token on that URL, but you are behind the
> same NAT device, so there's enough information to know which phone
> you're connecting to.
OK, I understand. I wasn't aware of that "feature". Or at least didn't
realize it worked that way. I'm impressed.
Thanks,
Jim.