Re: [Full-disclosure] [HV-PAPER] Anti-Phishing Tips You Should Not Follow

[Michal Zalewski <lcamtuf@xxxxxxxxxxxx>]

On Fri, 31 Mar 2006, Jasper Bryant-Greene wrote:

>> Just as most of the phishing sites already do.
> Really? I thought they somehow magically knew enough about you to sign
> you in properly and display all the correct details ;)

No, but the reasonable practice would be not to alert the customer (and
have him possibly, say, panic and call the bank in question) - but rather,
display something along the lines of "Thank you for successfully verifying
your Frob Mutual account data. Bye."

/mz

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/