Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 21 guests and 2 members online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Social Engineeringarrow Advice from Microsoft
Ethical Hacker Community Forums
January 07, 2009, 08:48:58 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Advice from Microsoft  (Read 4163 times)
0 Members and 1 Guest are viewing this topic.
RoleReversal
Hero Member
*****
Offline Offline

Posts: 507


View Profile WWW
« on: August 29, 2008, 07:03:20 AM »

I think I'm confused. just received this advice in an email from Mircosoft:
Quote
IMPORTANT:  Because fraudulent ("phishing") e-mail often uses misleading links, Microsoft recommends that you do not click links in e-mail, but instead copy and paste them into your browsers, as described above.

How does moving from a culture of blindly clicking on links to blindly cut&pasting said links help protect against phishing??? Oh, and the 'as described above? is a long and confusing URL....

Please help, my head hurts....
Logged

A little bit of sanity:
http://www.infosanity.co.uk
BillV
Hero Member
*****
Offline Offline

Posts: 881


View Profile
« Reply #1 on: August 29, 2008, 07:19:53 AM »

Haha... nice...

I would guess they're thinking is that a lot of links are typically similar to "hey, come over to www.ebay.com and give us your login!"
Logged
sgt_mjc
Full Member
***
Offline Offline

Posts: 166


View Profile
« Reply #2 on: August 29, 2008, 08:30:07 AM »

I think you are right there Bill. That may very well be the thought process behind it. Though, wouldn't it make more sense to not go there in the first place? Good defense is always trumped by dumb user.
Logged

Mike Conway
CompTia Security +
C|EH
mad_irish
Newbie
*
Offline Offline

Posts: 16



View Profile WWW
« Reply #3 on: August 29, 2008, 08:42:20 AM »

What's even scarier is that tactic fails to prevent many common phishing tactics.  For instance, using a domain name that looks like the target in specific fonts (substituting 1's for lower case L's for instance) or misspelled domain names.  Not to mention that if a link spans multiple lines and it's sometimes tough for users to cut and paste the whole thing.  Microsoft needs to do their security reading (http://people.seas.harvard.edu/~rachna/papers/why_phishing_works.pdf) first before issuing statements like this Sad
Logged
BillV
Hero Member
*****
Offline Offline

Posts: 881


View Profile
« Reply #4 on: August 29, 2008, 10:01:14 AM »

Quote from: sgt_mjc
Though, wouldn't it make more sense to not go there in the first place?

Exactly what makes this "advice" funny Smiley

RR - can you forward that email over to me?
Logged
dalepearson
Full Member
***
Offline Offline

Posts: 163


View Profile
« Reply #5 on: August 29, 2008, 10:08:19 AM »

I am sure it will all be fixed once IE8 goes gold Cheesy
Logged

RoleReversal
Hero Member
*****
Offline Offline

Posts: 507


View Profile WWW
« Reply #6 on: August 29, 2008, 10:51:59 AM »

RR - can you forward that email over to me?

check your inbox Smiley
Logged

A little bit of sanity:
http://www.infosanity.co.uk
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.052 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
How many security events including conferences and training do you attend a year:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.