Bugtraq mailing list archives
Re: New whitepaper "The Phishing Guide"
From: Daniel Veditz <dveditz () cruzio com>
Date: Fri, 24 Sep 2004 11:39:02 -0700
Aleksandar Milivojevic wrote:
Gunter Ollmann (NGS) wrote:While the Phishers develop evermore sophisticated attack vectors [...] Customers too have become wary of "official" email, and organisations struggle to install confidence in their communications.Sometimes it's unbelivable how long it takes organizations to discover that email can be signed. Especially nowdays when all major mail readers have support for at least S/MIME
How does that help in practice? A user fooled by a link to ebay-support.com is just as likely to accept signed mail from foo () ebay-support com. Not to mention that the potential profits from phishing could easily finance the purchase of a forged cert if someone at one of the built-in CA's was corruptible. Given the several that are based in 3rd world companies (not to mention recent US corporate scandals) I have no confidence that won't eventually happen. -Dan Veditz
Current thread:
- New whitepaper "The Phishing Guide" Gunter Ollmann (NGS) (Sep 22)
- Re: New whitepaper "The Phishing Guide" Aleksandar Milivojevic (Sep 23)
- Re: New whitepaper "The Phishing Guide" Seth Arnold (Sep 24)
- Re: New whitepaper "The Phishing Guide" Aleksandar Milivojevic (Sep 27)
- Re: New whitepaper "The Phishing Guide" Greg A. Woods (Sep 27)
- Re: New whitepaper "The Phishing Guide" Crispin Cowan (Sep 28)
- Re: New whitepaper "The Phishing Guide" Seth Arnold (Sep 24)
- Re: New whitepaper "The Phishing Guide" Daniel Veditz (Sep 26)
- Re: New whitepaper "The Phishing Guide" Chip Andrews (Sep 27)
- Re: New whitepaper "The Phishing Guide" Philip Stoev (Sep 29)
- Re: New whitepaper "The Phishing Guide" Juraj Bednar (Sep 28)
- Re: New whitepaper "The Phishing Guide" Brian Dessent (Sep 28)
- Re: New whitepaper "The Phishing Guide" Aleksandar Milivojevic (Sep 23)
- Re[2]: New whitepaper "The Phishing Guide" Karsten Heidrich (Sep 28)
- <Possible follow-ups>
- RE: New whitepaper "The Phishing Guide" Dehner, Benjamin T. (Sep 25)