4 ms·
> Set up an anti-phishing code I believe this is a system where you give a website something that you will recognize (I've seen small images used as well as te
by aeturnum 5y ago
> Set up an anti-phishing code
I believe this is a system where you give a website something that you will recognize (I've seen small images used as well as text) that they agree to display to you in their layout. It is supposed to make building convincing phishing websites harder, as the attackers cannot know what content a given user has sent to the service.
- eli 5y agoWhat stops the attacker from fetching the image or text?
- leevlad 5y agoIn this case you set the anti-phishing code in your account settings (arbitrary string). Then they include it in all email comms (in the top right of the email body). So if you get an email from what looks like "Crypto.com", but with a different anti-phishing code - then you can be certain that it's phishing.
- eli 5y agoOh, it's just for email. That makes sense. Seems pretty weak since it relies on the user noticing the absence of a security feature. I'd probably prefer the emails have no links and train people to never click from an email. Make them log in the same way they usually do to take any actions.
- dustymcp 5y agoWithdrawal from any crypto exchange requires you to confirm an email link :)