4 ms·
The part on the placebo SSL certificate is interesting (https://www.cs.auckland.ac.nz/~pgut001/pubs/book.pdf#page37 https://www.cs.auckland.ac.nz/~pgut001/pubs/
by snazz 8y ago
The part on the placebo SSL certificate is interesting (https://www.cs.auckland.ac.nz/~pgut001/pubs/book.pdf#page37 https://www.cs.auckland.ac.nz/~pgut001/pubs/book.pdf#page37). Do users really ignore the big red warnings that web browsers give for invalid certificates? I imagine that it has to do with the fact that someone would rather be able to do what they want to do instead of heeding a warning they don’t understand.
- est31 8y agoThis phenomenon even has a name. Dancing pigs: https://en.wikipedia.org/wiki/Dancing_pigs https://en.wikipedia.org/wiki/Dancing_pigs
- technion 8y agoI've done phishing testing with self-signed certificates, and I don't feel it had any impact on the rate at which users handed over credentials.