4 ms·
Banks and credit card companies have always been the absolute worst offenders for this, requiring people to use hidden iframes from all sorts of acmegenericsecu
by hanoz 8y ago
Banks and credit card companies have always been the absolute worst offenders for this, requiring people to use hidden iframes from all sorts of acmegenericsecure.net domains, and all the while professing to be the high priests of good practice with their absurd PCI racket, not to mention asking people to install random third party software just to use their websites because browsers apparently aren't good enough.
- smallbigfish 8y agoJust last year I told Ikea that they use a phishing like url in my country. Something like makeyourhomegreat.com (I can't remember the exact URL). They actually stopped using that URL but I'm not sure it was because of me or some other reason.
- gruez 8y ago>not to mention asking people to install random third party software just to use their websites because browsers apparently aren't good enough. is this still a thing? maybe this was true back in the days when activeX was still common, but not now.
- woodruffw 8y agoChase likes to send emails from the not-at-all-suspicious "acctmanagement.com" domain[1]. [1]: https://twitter.com/8x5clPW2/status/1046244493203263488 https://twitter.com/8x5clPW2/status/1046244493203263488
- Mistri 8y agoTheir reply to your tweet pisses me off
- jspash 8y agoGoogle's use of gvt1.com had me convinced for the longest time that I was backdoor'd by some unknown branch of the government that was either not bright enough to cover their tracks or ballsy enough to just say "yea, it's us. the government. and we're in your computer"
- anoncake 8y agoThe sensible thing would be to have dedicated software for anything involving handling money, in particular banking. Then you could tell people to never interact with their bank using a web browser.