Security Basics mailing list archives

Re: Anti-Phishing with digital watermarking


From: Ansgar Wiechers <bugtraq () planetcobalt net>
Date: Tue, 30 Sep 2008 20:17:54 +0200

On 2008-09-30 Ryan Greenier wrote:
I'd HIGHLY disagree with it being closer to 100% unreliable than
reliable. Most of the phishing attacks against institutions that my
company provides service for are copy/paste type deals leaving all
kinds of other info on there that is unrelated to what the attackers
are trying to accomplish (such as stats, etc). Shoot, they even leave
the javascript in there that determines the user's browsing
experience.

Since it doesn't interfere with their phishing attempt: why would they
remove any of the original content? However, a script that's supposed to
detect a phishing attempt is a whole different matter.

Regards
Ansgar Wiechers
-- 
"The Mac OS X kernel should never panic because, when it does, it
seriously inconveniences the user."
--http://developer.apple.com/technotes/tn2004/tn2118.html


Current thread: