#phishing (8 links)
Answer: no. Clever hack with security implications. "In effect, this is taking the old phishing trick of homoglyph attacks—an attack consisting of using confusing look-a-like URLs like paypa1.com with the numeral one replacing the letter ell—and adding a dash of cross-site scripting but where you become the agent of infection: the supposed “censorship” may be shocking enough to cause you to forward the link."
Via alastc.
- Verified by Visa: a conversion rate killer? | Blog | Econsultancy econsultancy.com
Banks and card providers haven't really done enough to educate customers about the system, or to make the forms more usable, but retailers can at least minimise some of the damage to conversion rates by doing as much as they can to advise customers about what to expect during the checkout process.
Take a look at Verified By Visa. Allegedly this protects cardholders - by training them to expect a process in which there’s absolutely no way to know whether you are being phished or not.
- Adactio: Journal - The password anti-pattern adactio.com
Asking users to input their email address and password from a third-party site like GMail or Yahoo Mail is completely unacceptable. Here’s why: It teaches people how to be phished.
- The Identity Corner » The problem(s) with OpenID idcorner.org
Comprehensive listing of problems with OpenID. FUD? Not FUD? Couldn't say myself but author competes in that space. OpenID + Passwordmaker.org is working well for me.
idproxy.net lets you use your Yahoo! account to sign in to sites that support the OpenID standard
- Why phishing catches punters | The Register theregister.co.uk
Scary. "If you haven't read Why Phishing Works (850Kb PDF) - written by Rachna Dhamija, J D Tygar, and Marti Hearst - stop what you're doing now and go get it (or at the very least, read a short summary of what it offers)."