Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Web-App-Sec
[Top] [All Lists]

Re: TrustBar and insecure sites of PayPal, MS Passport, Yahoo!, Chase, .

Subject: Re: TrustBar and insecure sites of PayPal, MS Passport, Yahoo!, Chase, ...
Date: Thu, 21 Oct 2004 08:20:04 -0700
and most visible and sensitive web sites still ask users to enter
passwords into unprotected web forms - making it trivial for attackers
to emulate these pages and steal passwords. These include PayPal, chase,
  Microsoft's passport, Yahoo!, eBay, TD Waterhouse,...  (I've checked
most of them about a month ago and this was still the case; I've checked
  PayPal today...)

Your tool may be nice, but Paypal does redirect to an SSL site if you type
in paypal.com or www.paypal.com and if you click the "log in" link.  Of
course, this helps, but since most web users are not savvy and don't use
your tool, such a "fix" rarely helps.  After all, someone who is naive
enough to follow such paypal links probably doesn't know anything about
keeping themselves safe online, which is why they are targeted.

David

<Prev in Thread] Current Thread [Next in Thread>