Browsers, phishing, and user interface design

Browsers, phishing, and user interface design
Scott Granneman, 2006-06-05

Phishing works for so many reasons, we need to rethink browser and user interface design to provide some real-life security to the average user who doesn't see or understand the security cues.

Expand all | Post comment

Sure. Lots of ideas... 2006-06-05
Anonymous (2 replies)

Your First Statement Is Right 2006-06-06
Anonymous (1 replies)

Re: Your First Statement Is Right 2006-06-07
Anonymous (1 replies)

Re: Re: Your First Statement Is Right 2006-06-08
Anonymous

The point is, however, that it would not be automatic. You would have to take a manual step to open that file. In which case, you would've had an intermediate opportunity to scan the file if you were concerned about it. Is it a little more inconvenient? Maybe a little. But the security provided by being forced to take such a step would be enormous.

Why should there be any chance that data could be interpreted as any kind of programming code?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/405/33714#33714

Re: Sure. Lots of ideas... 2006-06-24
Anonymous

Browsers, phishing, and user interface design 2006-06-06
Anonymous

Browsers, phishing, and user interface design 2006-06-06
TJ

Browsers, phishing, and user interface design 2006-06-06
Anonymous (1 replies)

Re: Browsers, phishing, and user interface design 2006-06-06
Anonymous (2 replies)

Re: Re: Browsers, phishing, and user interface design 2006-06-08
Anonymous

Re: Re: Browsers, phishing, and user interface design 2006-06-16
Anonymous

Browsers, phishing, and user interface design 2006-06-06
infamous41md

Browsers, phishing, and user interface design 2006-06-06
Todd Knarr

Email should be as in the begining: text ONLY 2006-06-07
Anonymous

Well, lets hope we find White Hats 2006-06-07
Anonymous

Education & Two-factor authentication 2006-06-07
Wolfy