full-disclosure - New Attack on Secure Browsing (fwd)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040715203548.N17279@ubzr.zsa.bet>
From: measl at mfn.org (J.A. Terranson)
Subject: New Attack on Secure Browsing (fwd)

This is Social Engineering, and a damn fine example!

This is in fact a pretty good fake-out: I'm sorry I didn't think of it
myself.

The obvious use here is in phishing expeditions: people *expect* that
little lock to be somewhere on the screen, but how many of them would
think "oh.  it's in the wrong place - it's fake."?  Far too few I'm
afraid.

-- 
Yours,

J.A. Terranson
sysadmin@....org

  "...justice is a duty towards those whom you love and those whom you do
  not.  And people's rights will not be harmed if the opponent speaks out
  about them."      Osama Bin Laden
	- - -

  "There aught to be limits to freedom!"    George Bush
	- - -

Which one scares you more?