Subscribe to this blog in Radio:
Didn't find what you were looking for?
E-mail this blog's author, Bruce Umbaugh: 
|
|
 |
Wednesday, April 05, 2006 |
Why Phishing Works.
Interesting paper.
Abstract:
To build systems shielding users from fraudulent (or phishing) websites, designers need to know which attack strategies work and why. This paper provides the first empirical evidence about which malicious strategies are successful at deceiving general users. We first analyzed a large set of captured phishing attacks and developed a set of hypotheses about why these strategies might work. We then assessed these hypotheses with a usability study in which 22 participants were shown 20 web sites and asked to determine which ones were fraudulent. We found that 23% of the participants did not look at browser-based cues such as the address bar, status bar and the security indicators, leading to incorrect choices 40% of the time. We also found that some visual deception attacks can fool even the most sophisticated users. These results illustrate that standard security indicators are not effective for a substantial fraction of users, and suggest that alternative approaches are needed.
Here's an article on the paper. [Schneier on Security]
7:20:30 AM
|
|
Laptop Detractors Shrugged Off.
Nicholas Negroponte, the MIT professor whose project to give impovershed children $100 laptops could be off the ground next year, reaffirms his commitment to the plan despite criticism from Microsoft and Intel.
[Wired News: Top Stories]
7:20:07 AM
|
|
Cheer the Turtle.
So I'm in Maryland, where I just watched Maryland win the Women's NCAA final, against Duke, which was favored (including by me... I'm a fan). As with the Florida win in the men's final yesterday, you had to like the winning team. And the winning teamwork. The Terps trailed most of the game, caught up, and never lost their energy or focus when the pressure coudn't be higher. Kristi Tolliver hit an NBA-range 3-pointer over the outstretched hand of Duke's 6'7" center, Allison Bales, the best shot-blocker in the history of the tournament, to tie the game and send the game into overtime. Went down to the wire in OT too, even with a 1-point Duke lead; but the outcome wasn't in doubt: Maryland was more determined. They showed why they've won all six overtime games this season.
Really felt bad for Duke. Coach Gail Goestenkors must own the record for finals futility. Fifth-year senior Monique Curry put off starting a WNBA career to lead Duke to the championship game... but not the championship. No telling how much that one hurt.
Anyway, back to packing for the next trip... See ya in San Antonio. [The Doc Searls Weblog]
7:19:57 AM
|
|
|