3 ms·
Interesting. Doesn't work for me, because I tend to associate tab content with where the tab is relative to other tabs. For example, I don't normally have gmai
by younata 16y ago
Interesting. Doesn't work for me, because I tend to associate tab content with where the tab is relative to other tabs.
For example, I don't normally have gmail open in a tab (I prefer to use mutt as my email client), so, to see "Gmail: Email fro..." - as I currently see in the tab directly left of this one - is disorienting for me. I expected the article on phishing.
However, even without it, this attack isn't exactly mature. Different browsers will render the javascript differently. My browser tried to execute the page-changing javascript as it was loading the page, and I was viewing the page. Obviously, in a few months or so, this will change, but for the first reason, I remain firm in my stand that this attack doesn't really mean much.
- pavel_lishin 16y agoIt wouldn't work for me for several reasons; one, I always keep g-mail in the left-most tab, two, I use 1Password to fill in all my passwords, which obviously wouldn't work with the wrong URL. But the 1Password thing is a recent thing; I could easily have fallen for one of the bank attempts, since I usually leave them open in another tab while it's loading, or if I get bored, so it's not unusual for me to tab over and be surprised by a "you've been logged out!" screen.