You're right, and I apologise.

But I should point out that the poster to whom I was replying was also flinging insults, claiming that people who get tricked by phishers ("tricked", in this case, meaning "being the victim of a serious crime that may completely destroy your livelihood") are "n00b and stupid". I lost my temper a little because:

* this is blaming the victim, in a very serious criminal matter; and

* this was about the third forum in a row in which most posters (especially the guy making the insults) totally missed the import of the paper: phishing success is NOT just about catching the ignorant, it is MAINLY about smart users overestimating their own ability to spot it.

In such an environment of oily smugness, phishing will continue to thrive.

I hope my angry tone did not prevent readers from at least considering my second paragraph.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/176/874#874