Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-31 Thread Michael Vincent van Rantwijk
Gervase Markham wrote: Michael Vincent van Rantwijk wrote: What exactly is a 'domain indicator'? The thing you get in the status bar when visiting an SSL site, which shows you the domain you are connected to. Gerv Oh that :( Thanks, Michael.

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-31 Thread Hruodperht
It looks to me like it doesn't work as well as it claims, though. A phisher could direct the user via an email to click on a legitimate link to a proper site - this could be a EULA or something like the GPL. A second URL could be included in the email below the legitimate URL - providing the user

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-31 Thread Gervase Markham
Michael Vincent van Rantwijk wrote: What exactly is a 'domain indicator'? The thing you get in the status bar when visiting an SSL site, which shows you the domain you are connected to. Gerv ___ Mozilla-security mailing list Mozilla-security@mozill

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-29 Thread Michael Vincent van Rantwijk
Gervase Markham wrote: Ian G wrote: Well, I hate to be the wet blanket. Whatever you want to term it, it was the same thing as happened to Trustbar, to Gerv's stuff, to the SSH bug fix suggestions that were filed, I don't think anything I've suggested has reached a dead end. The only one I

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-29 Thread Gervase Markham
Ian G wrote: Well, I hate to be the wet blanket. Whatever you want to term it, it was the same thing as happened to Trustbar, to Gerv's stuff, to the SSH bug fix suggestions that were filed, I don't think anything I've suggested has reached a dead end. The only one I've yet implemented (the d

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-28 Thread J. Greenlees
Tony Mechelynck wrote: ~snip~ I'm not convinced the Mozilla Suite is fit for "the average Internet user" in the same way IE is. Faster bug-fixing also means more frequent upgrades and more "hassle". IE has a major version upgrade, how often? every three years? with a bugfix maybe every month or

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-28 Thread Ian G
On Saturday 28 May 2005 11:46, Duane wrote: > Ian G wrote: > > The free toolbar, released Tuesday, was downloaded more than 60,000 > > times within hours of its release, according to Netcraft Internet > > Services Developer Paul Mutton. > > Actually I meant to comment on this specifically before.

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-28 Thread Tony Mechelynck
Ian G wrote: > On Friday 27 May 2005 18:02, Tony Mechelynck wrote: > > >>I get already too many emails telling me "this will earn you million >>dollars in a week", "this will let you make love all night without >>losing an erection", "get Microsoft and Symantec products at one-tenth >>the cost",

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-28 Thread Duane
Ian G wrote: > The free toolbar, released Tuesday, was downloaded more than 60,000 times > within hours of its release, according to Netcraft Internet Services > Developer Paul Mutton. Actually I meant to comment on this specifically before... For starters they got slashdotted, which is an e

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-28 Thread Ian G
On Friday 27 May 2005 18:02, Tony Mechelynck wrote: > I get already too many emails telling me "this will earn you million > dollars in a week", "this will let you make love all night without > losing an erection", "get Microsoft and Symantec products at one-tenth > the cost", even spams telling m

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-28 Thread Ian G
On Saturday 28 May 2005 02:14, Tyler Close wrote: > On 5/27/05, Ian G <[EMAIL PROTECTED]> wrote: > > And, both petname and trustbar were roundly rejected > > by the Mozilla security community. Strike two. > > My understanding was that no one on this list has the authority to > introduce a new tool

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-27 Thread Ka-Ping Yee
On Fri, 27 May 2005, Ian G wrote: > And, both petname and trustbar were roundly rejected > by the Mozilla security community. Is there a foundation for this statement? I would really like to learn what constitutes the Mozilla security community and what constitutes the authority to speak for it.

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-27 Thread Tyler Close
On 5/27/05, Ian G <[EMAIL PROTECTED]> wrote: > And, both petname and trustbar were roundly rejected > by the Mozilla security community. Strike two. My understanding was that no one on this list has the authority to introduce a new tool into the Firefox UI and the only person who has that authori

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-27 Thread Tony Mechelynck
Ian G wrote: [...] > As a fundamental tenet of security the developers, > designers and implementors do not know the user's > risk preferences, except under certain exceptions. > > For many users, > a little spyware is likely a good choice if it saves them > from being phished. Spyware clogs the

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-27 Thread Duane
Michael Vincent van Rantwijk wrote: > I guess you've downloaded it from > http://toolbar.netcraft.com/install/netcrafttoolbar.xpi and had a look > at the source, if so, please backup your claim about this (possible) > privacy issue. Hey, anyone can say/claim anything here, but you should > at leas

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-27 Thread Michael Vincent van Rantwijk
Duane wrote: Ian G wrote: Firefox users snap up Netcraft's antiphishing toolbar Netcraft's toolbar blocks access to reported phishing sites I grabbed it, tried it and promptly uninstalled it based on how much information was leaking like a submarine with screen doors back to netcraft... S

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-27 Thread Ian G
On Friday 27 May 2005 06:04, Nelson B wrote: > Duane wrote: > > Ian G wrote: > >>Firefox users snap up Netcraft's antiphishing toolbar > >> Netcraft's toolbar blocks access to reported phishing sites > > > > I grabbed it, tried it and promptly uninstalled it based on how much > > information was le

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-26 Thread Nelson B
Duane wrote: Ian G wrote: Firefox users snap up Netcraft's antiphishing toolbar Netcraft's toolbar blocks access to reported phishing sites I grabbed it, tried it and promptly uninstalled it based on how much information was leaking like a submarine with screen doors back to netcraft... Some

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-26 Thread Duane
Tony Mechelynck wrote: > Pardon me if I'm obtuse, but it sounds to me like Netcraft doing the > phishing, under the pretense of protecting the user against it. I don't think they are collecting data to conduct ID fraud etc, but I do feel like they are harvesting data not in my or any other users

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-26 Thread Tony Mechelynck
Duane wrote: > Ian G wrote: > > >>Notice that both trustbar and petnames tried to work >>with PKI and augment them. Netcraft ignores it totally, >>by harvesting data and aggregating it. If that's works, >>so be it, security is too important to waste on textbook >>models. > > > the only thing

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-26 Thread Duane
Ian G wrote: > Notice that both trustbar and petnames tried to work > with PKI and augment them. Netcraft ignores it totally, > by harvesting data and aggregating it. If that's works, > so be it, security is too important to waste on textbook > models. the only thing I have an issue with the ne

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-26 Thread Ian G
On Friday 27 May 2005 01:21, Duane wrote: > Ian G wrote: > > Firefox users snap up Netcraft's antiphishing toolbar > > Netcraft's toolbar blocks access to reported phishing sites > > I grabbed it, tried it and promptly uninstalled it based on how much > information was leaking like a submarine wit

Re: Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-26 Thread Duane
Ian G wrote: > Firefox users snap up Netcraft's antiphishing toolbar > Netcraft's toolbar blocks access to reported phishing sites I grabbed it, tried it and promptly uninstalled it based on how much information was leaking like a submarine with screen doors back to netcraft... Something like

Firefox users are worried about phishing: "60,000 downloads in hours"

2005-05-26 Thread Ian G
http://www.infoworld.com/article/05/05/26/HNfirefoxnetcraft_1.html Firefox users snap up Netcraft's antiphishing toolbar Netcraft's toolbar blocks access to reported phishing sites By Scarlet Pruitt, IDG News Service May 26, 2005 Users of the Firefox Web browser have been flocking to Net