, 2006-06-05
Phishing works for so many reasons, we need to rethink browser and user interface design to provide some real-life security to the average user who doesn't see or understand the security cues.
Expand all |
Post comment
Browsers, phishing, and user interface design
2006-06-06
Anonymous (1 replies)
Anonymous (1 replies)
That means... no working links. Image retrieval... maybe; but only optionally, and with a verification before loading.
HTML should only be used as a descriptive language in email messages, nothing else.
The next idea, of course, is to use E-mail standards. Text only. No HTML. No MS formatted attachments.
No authomatic "HELPER" applications other than display only.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/405/33685#33685