, 2006-06-05
Phishing works for so many reasons, we need to rethink browser and user interface design to provide some real-life security to the average user who doesn't see or understand the security cues.
Expand all |
Post comment
Sure. Lots of ideas...
2006-06-05
Anonymous (2 replies)
Anonymous (2 replies)
Your First Statement Is Right
2006-06-06
Anonymous (1 replies)
Anonymous (1 replies)
Browsers, phishing, and user interface design
2006-06-06
Anonymous (1 replies)
Anonymous (1 replies)
Consider this: the user is just trying to browse a site and the browser comes up saying "wait a moment: I have to tell you a long but interesting story".
Sure the user is going to answer "Ok, ok, but now let me just see this nice site my friend told me about".
Maybe alert messages could be more effective in... well, alerting the user if they were short and simple, like "Caution: malicious site. For more info click _here_" (a link to the whole story for those - not many, it seems - who'd like to understand what's going on).
But I guess this would feel too much like IE's alerts, which are ineffective as well...
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/405/33743#33743