Re: Request for comments - anti-phishing approach

From: Unruh (unruh-spam_at_physics.ubc.ca)
Date: 05/30/05 

Date: 30 May 2005 01:33:37 GMT

"douglas.ross@gmail.com" <douglas.ross@gmail.com> writes:

>> The font face "protection" is irrelevant. No customer is going to be
>> bothered that the relevant info is in a different typeface.

>Valid point. I forgot to add a captain at the bottom (instead of the
>800 number) that says something to the effect: if the fonts don't
>match up, do not sign in!

?? That is what it says on the valid site. Why would it say anything on the
invalid site. You seem to think that people will bring up the bogus site
and then also bring up the valid site, and compare them. No need. Once they
are that suspicious the phishing has failed. All it has to do it look
plausibly like the company site.

>> Remember that
>phishers are catching the less knowledgeable and observant segment of
>the
>population anyway.

>I hope that's true, but given the fact that I almost fell for an AT&T
>WorldNet phishing scam... I'm not so sure...

Our observancy and our smarts are not constant. They can fluctuate.

>Thanks