Bugtraq mailing list archives
Re: Firefox: about:blank is phisher's best friend
From: Michal Zalewski <lcamtuf () dione ids pl>
Date: Thu, 22 Feb 2007 21:56:35 +0100 (CET)
On Thu, 22 Feb 2007, Florian Weimer wrote:
This is the first time I read about the forced window title change. I hadn't noticed it earlier. Do you think this is a good enough security indicator (or indicator of origin, to be more precise)?
This is quite inadequate as far as protecting inexperienced users is considered - but at least offers a chance for more alert ones to notice the problem. Bypassing it through about:blank elliminates even this opportunity, so we're back in square one... /mz
Current thread:
- Firefox: about:blank is phisher's best friend Michal Zalewski (Feb 16)
- RE: Firefox: about:blank is phisher's best friend Michael Wojcik (Feb 20)
- Re: Firefox: about:blank is phisher's best friend Florian Weimer (Feb 22)
- Re: Firefox: about:blank is phisher's best friend Michal Zalewski (Feb 22)
- <Possible follow-ups>
- Re: Firefox: about:blank is phisher's best friend zonafirefox (Feb 17)
- Re: Firefox: about:blank is phisher's best friend Michal Zalewski (Feb 17)