OpenID Phishing Demo (sort of) Date: 2008-05-28 00:32:42
Fun communications hosts an ID theft demo at http://idtheft.fun.de/. Like any other fishing site it works by presenting a fake login page to the user - in this case you can first choose your OpenID provider and are then presented with a copy of their sign-in page.
Somehow people are throwing nervous fits over this antique exploit. Seriously, I just don't see the point of this exercise. Am I missing something? During the whole spoofing process, idtheft.fun.de's URL is plainly visible and it is very obvious that something is wrong. If you fall for this thing, you're also the type of person to fall for any other fake sign-in attack. This is not a technical problem, it's a classical social engineering attack.
Sadly, there are still many people out there who don't know what that thing in their address bar is. *sigh*
Somehow people are throwing nervous fits over this antique exploit. Seriously, I just don't see the point of this exercise. Am I missing something? During the whole spoofing process, idtheft.fun.de's URL is plainly visible and it is very obvious that something is wrong. If you fall for this thing, you're also the type of person to fall for any other fake sign-in attack. This is not a technical problem, it's a classical social engineering attack.
Sadly, there are still many people out there who don't know what that thing in their address bar is. *sigh*
Comments
|
EMSPV says
(2008-06-17 06:28:13)
It also just doesn't work with Konqueror/Safari. Duh. What a fishing site that isn't compatible to the browser one uses. | |
|
admin says
(2008-06-23 09:54:58)
Pah! Who uses Safari anyway :-P (well I do, but only on special holidays) | |
 EMSPV |
EMSPV says
(2008-06-23 10:30:48)
Even though I try FF every now and then (and needed it because of Firebug lately), I cannot get to like it. It's bloated, but tries to hide it; it takes ages to start, and its font rendering is crumpy. Who had that idea of setting PIXEL SIZED fonts in the properties dialogue?! |
|
admin says
(2008-06-25 12:17:29)
Oh yes, it is certainly bloated. And quality control on FF 3 for Mac sucked a little bit. But I still like it. We have a complicated relationship. |
