funsec mailing list archives

Re: bankone/chase non-scam


From: Drsolly <drsollyp () drsolly com>
Date: Wed, 29 Nov 2006 00:04:22 +0000 (GMT)

On Tue, 28 Nov 2006, Gadi Evron wrote:

On Tue, 28 Nov 2006, Paul Vixie wrote:
apparently, the programmers who write online banking e-mail interfaces are
learning their UI craft by looking at their inbound spam load.  these are
legit.  i've whiteout'd the activation codes, which were different btw.

if anyone has a contact at bankone/chase, please raz them on my behalf.

re:



Bank of America sends EMAIL notifications, to a server sitting at
outsources hosting, using a different certificate and a different domain.

It's legit. How can you tell phishing for Band of America from the real
thing?
 
You don't need to. People should be told that all emails purporting to 
come from banks are to be ignored, and then banks have to find another way 
to communicate with their customers.

My bank uses bits of paper.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: