3 ms·
Those pictures can easily be proxies by a spoofer, so I don't see the point of them.
by krallja 9y ago
Those pictures can easily be proxies by a spoofer, so I don't see the point of them.
- kibwen 9y agoThose pictures are indeed useless when used by banks, since they do nothing against MITM. But for the attack described in the OP they would actually be a reasonable defense, since this sort of indiscriminate low-privilege phishing can't intercept requests between the user and the system in order to determine the secret image.