WebApp Sec mailing list archives

Re: Proposal to anti-phishing


From: Mike Podanoffsky <mike () sharecube com>
Date: 26 Jan 2005 09:54:12 -0000

In-Reply-To: <001201c50279$13fc5710$1464110a@bigdog>

All,

I am against blaming the victim in the case of phishing. It is a new technology and individuals are just becoming aware 
of the potential pitfalls. 

While it is true that there are other ways to trick a user (phone, fax, etcÂ…), the economics of phishing are 
significantly different. One phish email could net thousands of responses, but it would take thousands of phone calls 
to net one victim.

Phishing can be solved through technology and banks are beginning to understand the financial and reputation impact on 
their business.

Mike Podanoffsky
http://www.sharecube.com


Kurt wrote:

Please kill this thread, it's gotten completely silly.

If user's are willing to go to a website of unknown providence and type in 
their credit card # no amount of technology will help, attackers will find a 
way to trick users (phone, fax, email, web, whatever, none of this is really 
new).


Kurt Seifried, kurt () seifried org
A15B BEE5 B391 B9AD B0EF
AEB0 AD63 0B4E AD56 E574
http://seifried.org/security/






Current thread: