Re: The end of Phishing in sight?

[Dave Dennis <dmd () speakeasy org>]

Question for the technical types on the list --

Since most / all phishes pull graphics from deep links in the site
they are spoofing ..

and since apache (and I think IIS too?) can prevent easily so called
'deep-linking' from their site, or ACL at the gateway only approved
server ip to link to their image stores...

Why do the major financial institutions and other companies falling
prey to phishing simply not allow deep-linking of their images and
pages?

Would this not solve a majority of phish mails, at least require the
bad guys to build a whole page by hand themselves, rather than pull
handy graphics from the spoofed site.. ?


+-------------------------
+ Dave Dennis
+ Seattle, WA
+ Speakeasy, Inc.
+ dmd () speakeasy net
+ http://www.speakeasy.net
+-------------------------
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.