full-disclosure - Re: simple phishing fix

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 30 Jul 2008 08:41:20 -0700
From: blah <blah@...kogre.com>
To: stuart@...erdelix.net
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: simple phishing fix

On Wed, Jul 30, 2008 at 1:14 AM, lsi <stuart@...erdelix.net> wrote:
> Thank you all for your comments.  However, I cannot disagree more
> fully.

The simple fact that you said, put all banks on the list except the
one you actually use, really demonstrates how poorly some of this has
been thought out.

Because then, phish emails get through, and the end user is at greater
risk.  Perhaps even more so with the false sense of security you gave
them by setting up "filters".

Your smart move would be to acknowledge some of the glaring holes in
the statements you have made.  However, to continue to defend some of
the really bad ideas you've proposed bolsters the recently stated
opinion that you're simply trolling.

I think it's always great to toss an idea out there to see its
reception.  That doesn't mean you have to defend it to the death, but
only to the point that it's been proven to be unviable.

That point has been made, as you have not addressed some of the
glaring weaknesses in your statements.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/