Re: A new type of phishing attack
"Stiegler, Marc" <[email protected]>
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <63601DC9100AAC48812C1985727F34485C93BDA3@G9W0727.americas.hpqcorp.net> |
It is also yet another reminder that webkeys would fix these problems if people would just implement them. Or 2FACC if people would just implement that. Sigh. --marcs -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Sandro Magi Sent: Friday, September 12, 2014 6:33 AM To: General discussions concerning capability systems. Subject: [cap-talk] A new type of phishing attack Interesting new phishing idea: http://www.azarask.in/blog/post/a-new-type-of-phishing-attack/ Basically exploiting a typical user's workflow where they have multiple tabs open. This highlights the real need for a functional petname system. As a trivial countermeasure, I wonder if it's really necessary for JavaScript to run on inactive tabs. Sandro _______________________________________________ cap-talk mailing list [email protected] http://www.eros-os.org/mailman/listinfo/cap-talk