Re: Request for comments: anti-phishing storefrontapproach

["Mike N" <niceman () att net>]

I can see many users falling for the scenario below - it *sounds* realistic 
since they don't understand the underlying mechanism.

----- Original Message ----- 
From: "Dan Margolis" <dmargoli+lists () af0 net>

> Or, better yet, a box that says "If the above image does not read
> 'AUTHENTIC,' do not sign in." Users would assume that some sort of
> verification were going on. Never mind the mechanism.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/