3 ms·
The original title of the article is "A New Type of Phishing Attack". There's nothing about "savvy users", since a savvy user would note that the URL is complet
by miles 16y ago
The original title of the article is "A New Type of Phishing Attack". There's nothing about "savvy users", since a savvy user would note that the URL is completely wrong. Savvy users are also likely to be running NoScript, using form-filling password managers, etc.
- pwim 16y agoThe idea is that a savvy user may notice the url when they first surf to the site, but are less likely to do so when they return to a tab they have previously opened.
- thorax 16y agoI'd consider myself a savvy user. I don't run NoScript, nor do I always notice when the auto-password feature doesn't work because I use multiple browsers and they don't all have the same credentials. Nor do I (think I) always scan the URL when I switch tabs-- though surely I'll do more of that now. This won't work against most savvy users on their best days. It will probably work against most savvy users on any given bad day. What's interesting to me is that it'd be pretty easy for a site owner to target very specific users who visit their site. I could easily see this being used by a rogue employee at a web company to gather credentials/info on a specific target VIP and then covering their tracks later.
- jcl 16y ago"Having a large number of tabs open" is a good first approximation to "savvy".