full-disclosure - New Attack on Secure Browsing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: lyndons at paradise.net.nz (Lyndon)
Subject: New Attack on Secure Browsing

This thread is simply ludicrous.

JAT> This is Social Engineering, and a damn fine example!

JAT> This is in fact a pretty good fake-out: I'm sorry I didn't think of it
JAT> myself.

JAT> The obvious use here is in phishing expeditions: people *expect* that
JAT> little lock to be somewhere on the screen, but how many of them would
JAT> think "oh.  it's in the wrong place - it's fake."?  Far too few I'm
JAT> afraid.