Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Browsers, phishing, and user interface design
Scott Granneman, 2006-06-05

Phishing works for so many reasons, we need to rethink browser and user interface design to provide some real-life security to the average user who doesn't see or understand the security cues.

Comments Mode:
Sure. Lots of ideas... 2006-06-05
Anonymous (2 replies)
Your First Statement Is Right 2006-06-06
Anonymous (1 replies)
Re: Your First Statement Is Right 2006-06-07
Anonymous (1 replies)
Re: Sure. Lots of ideas... 2006-06-24
Anonymous
Browsers, phishing, and user interface design 2006-06-06
Anonymous (1 replies)
Re: Browsers, phishing, and user interface design 2006-06-06
Anonymous (2 replies)
> one of the best ways I can think of to help users avoid phishing is to have them read email in plain text.

That might work if the only links people received via email were phishing. The problem is that people receive both good and bad links in their email and they don?t know which links are ok to click on and which arn't. If you make email plain text people will still need to go to the good links and will learn how to cut and paste the urls and we are back where we started.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/405/33696#33696
Send them to AOL 2006-06-07
Anonymous
Stop babying people 2006-06-09
Anonymous
Wrong end to start patching 2006-06-12
Thomas Nilsen (1 replies)
Re: Wrong end to start patching 2006-06-12
Anonymous
Ingredients of possible solutions 2006-06-16
S. Lo Presti
Users ignore alert messages... 2006-06-20
Anonymous
simple: 2006-06-24
ailaG







 

Privacy Statement
Copyright 2008, SecurityFocus