Just like the early days when the internet was finally accessable for not just the MIT grad but everyone else, the risk of abuse was high with so many clueless users in a media that had been dominated by "techies" for years. Since Phishing isn't exactly new I don't hear of too many White Hats coming out and bringing new ideas with the exception of a few such as the author of this article. The big question is offering users security without inconvenience. Which can chase away anyone when they actually have to face one warning (pop up, verification notice, etc.) after another. Hopefully the 'Phishers' that have been caught will decide to at least provide input of how they did it which allows one to see what exploits they look for and how they find them. In order to win the battle one must know the enemy.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/405/33700#33700