The Spoofer project measures the Internet's susceptibility to spoofed source address IP packets. Malicious users capitalize on the ability to "spoof" source IP addresses for anonymity, indirection, targeted attacks and security circumvention. Compromised hosts on networks that permit IP spoofing enable a wide variety of attacks. We measure various source address types (invalid, valid, private), granularity (can you spoof your neighbor's IP address?), and location (which providers are employing source address validation?). Our research is particularly relevant given the regular appearance of new spoofed-source-based exploits, despite decades of filtering effort.