WebApp Sec mailing list archives

Re: Article - A solution to phishing

From: mike () sharecube com
Date: 15 Jul 2005 00:23:55 -0000

The acutrust.com security blanket isnt particularly safe. First, it requires revealing your password. Therefore, it 
means that you have to type your password to some potentially rogue site before you know if it is valid.

Both this and PassMark like sites can be bypassed with fairly simple HTML and Javascript. See shameless plug: 
http://www.sharecube.com/shared-secret-exploits.html).

By the way: It isnt slow as in another post. It does nothing until you type your entire password.


Mike Podanoffsky (CTO)
www.sharecube.com

Current thread:

Re: Re: Article - A solution to phishing jcjhilvfgvqcf (Jul 14)
- Re: Article - A solution to phishing Thomas Chiverton (Jul 14)
  - Re: Article - A solution to phishing Saqib Ali (Jul 14)
- Re: Article - A solution to phishing Frank O'Dwyer (Jul 14)
- Re: Re: Article - A solution to phishing bluewizard83-de4gahsh (Jul 14)
- Re: Re: Article - A solution to phishing RSnake (Jul 14)
  - Re: Re: Article - A solution to phishing RSnake (Jul 18)
    - Re: @CHECK Re: Re: Article - A solution to phishing Dennis W. Kennedy (Jul 18)
- <Possible follow-ups>
- Re: Article - A solution to phishing mike (Jul 14)
- RE: Re: Article - A solution to phishing Simon Zuckerbraun (Jul 14)
  - RE: Re: Article - A solution to phishing Leandro Meiners (Jul 15)