3 ms·
I havent particularly been following it, but is there any real solution to phishing? with punycode domains and arbitrary tld's, along with characters that look
by daleharvey 17y ago
I havent particularly been following it, but is there any real solution to phishing? with punycode domains and arbitrary tld's, along with characters that look the same in a lot of fonts, l and I, people need a cs degree to figure out if they are being phished.
I guess paypal and a small number of verified payment processors, (or real online banking) are about the only option.
- AngryParsley 17y agoSingle-use credit card numbers (and one-time passwords) would help a ton. Multifactor authentication of any kind would also be good. The problem with all of these ideas is that they're harder to use than fixed CC numbers and passwords. I do like the convenience of being able to memorize a password or CC number though.
- neurotech1 17y agoYes, Use bookmarks on a trusted computer or better yet type any sensitive domains. Typing www.paypal.com is easy.
- deleted 17y ago[deleted]
- arantius 17y agoYes, and it's very simple. Don't type anything important unless you also typed the URL into the address bar. Plenty of real mail from reputable, very phishable, sites actually say exactly this in their real emails-to-customers sometimes. Laziness, of course, is a problem also.