4 ms·
Browsers should implement some mechanisms to combat this type of phishing. I've gone ahead and reported this as a phishing site on Google safe browsing and othe
by cbg0 8y ago
Browsers should implement some mechanisms to combat this type of phishing. I've gone ahead and reported this as a phishing site on Google safe browsing and other services.
- cool-RR 8y agoYou can just disable grouping taskbar items, which is convenient for me regardless of this issue. Then it's clear that 1 window is not 2 windows.
- mehrdadn 8y agoIt's possible for programs to make windows that aren't in the taskbar though. I'm not entirely sure I would know/remember whether this ever happens for a browser.
- chii 8y ago> Browsers should implement some mechanisms to combat this type of phishing. combatting this doesn't require browsers - you can have a passwordless login mechanism (like email links!). Or, if browsers do indeed want to combat issues such as these, we'd need support for client-side certs (so you can login using a key-pair!), rather than username/password. Or, rely in a tool like lastpass to consistently enter the credentials (which, presumably, will check the domain first and if it doesn't match, won't let you put the credentials in).
- askmike 8y agoThe problem with e-mail links is that if the e-mail inbox gets hacked the hacker now has access to all the user's services.
- jstanley 8y agoUnlike with passwords, where the attacker has to go to the extra step of clicking "I forgot my password" in order to convert access to the email inbox into access to all the user's services.
- julianwachholz 8y agoYou can see in the screenshots that the author indeed uses LastPass. No autofill suggestion by your password manager (even your browser's built-in one) in the login fields would be a dead giveaway in this case.