BS> So we know this was real? It's such a bizarre request that my initial
BS> reaction was that it was a phish of some sort.  What sort of reaction
BS> from the credit card company causes an "unable to verify" result?

I had a similar question the last time I got a Verified By Visa redirect,
actually, because it popped up in a frame in the middle of the vendor's
web site, making me wonder how the heck I was supposed to know that it was
legit, and and not the vendor phishing for information that they shouldn't
have. Maybe there was something obvious there, but at the time I didn't
see it... So how *are* you supposed to know that a Verified By Visa thing
is legit?

(Thirty seconds of research turns up
https://en.wikipedia.org/wiki/Verified_by_visa#Verifiability_of_site_identity,
suggesting that it's not just me. Which bleah, because it's sort of a good
idea, but the current implementation is really terrible from a phishing
point of view.)

                                      -Josh (iril...@infersys.com)
_______________________________________________
Tech mailing list
Tech@lists.lopsa.org
https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to