<?xml version="1.0" encoding="UTF-8"?> <rss version="2.0"
xmlns:content="http://purl.org/rss/1.0/modules/content/"
xmlns:wfw="http://wellformedweb.org/CommentAPI/"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:atom="http://www.w3.org/2005/Atom"
xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
><channel><title>indeedle &#187; security</title> <atom:link href="http://indeedle.com/tags/security/feed/" rel="self" type="application/rss+xml" /><link>http://indeedle.com</link> <description>blogging the indeedle way</description> <lastBuildDate>Tue, 27 Jul 2010 02:41:06 +0000</lastBuildDate> <language>en</language> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <generator>http://wordpress.org/?v=3.0.1</generator> <item><title>Phishing</title><link>http://indeedle.com/blog/2009/12/29/phishing/</link> <comments>http://indeedle.com/blog/2009/12/29/phishing/#comments</comments> <pubDate>Tue, 29 Dec 2009 01:06:12 +0000</pubDate> <dc:creator>Cody</dc:creator> <category><![CDATA[Online]]></category> <category><![CDATA[phishing]]></category> <category><![CDATA[relaunched]]></category> <category><![CDATA[security]]></category><guid isPermaLink="false">http://indeedle.com/?p=29</guid> <description><![CDATA[Originally Posted: January 4th, 2009 In the field of computer security, phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. Thatâ€™s how wikipedia defines phishing. Donâ€™t confusing it with fishing which is a sport [...]]]></description> <content:encoded><![CDATA[<div><p><em>Originally Posted: January 4th, 2009</em></p><blockquote><p>In the field of computer security, <strong>phishing</strong> is the <a title="Criminal" href="http://en.wikipedia.org/wiki/Criminal">criminally</a> <a title="Fraud" href="http://en.wikipedia.org/wiki/Fraud">fraudulent</a> process of attempting to acquire sensitive information such as usernames, <a title="Password" href="http://en.wikipedia.org/wiki/Password">passwords</a> and credit card details by masquerading as a trustworthy entity in an electronic communication.</p></blockquote><p>Thatâ€™s how <a title="Password Phishing" href="http://en.wikipedia.org/wiki/Password_phishing" target="_blank">wikipedia defines phishing</a>. Donâ€™t confusing it with <a title="Fishing" href="http://en.wikipedia.org/wiki/Fishing">fishing</a> which is a sport where you either catch undersized fish and brag about the ones that go away, or itâ€™s a way people get out their sadistic torture urges by torturing fish for fun.</p><p>Phishers on the Internet do so to rob people of their username/password combos for many different websites. This is generally used with banking websites through the use of fake-login pages or emails that look official. Banks get hit by this a lot, as people use it to literally rob you of your money, so you need to be bloody careful.</p><p>What annoys me though itâ€™s not limited to things that have actual worth, such as money. People phish other people on gaming websites to access their game accounts. It amazes me honestly.</p><p>If youâ€™ve been on Gaia for more than five minutes then youâ€™ll know they have password phishers floating about. Claiming to be from admin who need your password to check your account out, or claiming to be a moderator giving you gold. Itâ€™s funny and sad at times really.</p><p>I get a few a week sent to me, I donâ€™t know why honestly I guess theyâ€™re hoping Iâ€™m extra stupid.</p><p><a href="http://media.indeedle.com/2009/12/scam1.jpg" rel="lightbox[29]"><img class="aligncenter size-medium wp-image-28" title="Outlining a Scam" src="http://media.indeedle.com/2009/12/scam1-300x159.jpg" alt="Outlining a Scam" width="300" height="159" /></a></p><p>Obviously it wasnâ€™t coloured, instead I added the colours so I can talk about the specific points. So shall we embark?</p><blockquote><p><strong>attempted hacking, scamming, trolling, and life threatening</strong></p></blockquote><p>Wow, Iâ€™ve certainly been a bad boy havenâ€™t I? I mean attempting hacking is one thing, but also trolling and scamming as well. Apparently also life threatening which is a concern.</p><p>Obviously itâ€™s complete rubbish. They like to put a lot of threatening words inside their messages as then it scares some users into not reading the rest properly and ignoring the warnings (like common sense) and falling for the scam.</p><p>The light-blue section cracks me up, yes you shouldnâ€™t give out your password normally but this is a special time and you should anyway.</p><p>Then we add with the yellow section, threats. If you donâ€™t do this then <strong>â€œit will resolve in a 6 month ban and banning of the IP powerâ€</strong>. Right, so firstly how can it <strong>resolve</strong> into a ban? Wouldnâ€™t it <strong>result</strong> in a ban? And do any of you reading this understand what <strong>â€œbanning of the IP powerâ€</strong> means? I donâ€™t think Iâ€™ve ever heard of the IP power.</p><p>Once again, itâ€™s meant to scare you though this wouldnâ€™t scare a toaster.</p><blockquote><p><strong>We also ned space between your password</strong></p></blockquote><p>Ok, so you <strong>ned</strong> a space between my password. Would this have anything to do with the fact that passwords cannot be PMed on Gaia and an error occurs when you try it?</p><p><a href="http://media.indeedle.com/2009/12/scam2.jpg" rel="lightbox[29]"><img class="aligncenter size-medium wp-image-30" title="Browser Warning" src="http://media.indeedle.com/2009/12/scam2-300x44.jpg" alt="" width="300" height="44" /></a></p><p>Now, correct me if Iâ€™m wrong, why would a website require you to be examined for bad things by sending them your password, and then design a system that actively prevents the password from being sent? That just doesnâ€™t make sense.</p><p>Unfortunately a lot of people donâ€™t actually think about that. They donâ€™t wonder why any developer would design a system that relied on user assistance to examine anything bad they may have done.</p><p>It would be as if the police had to get your personal PIN number for your bank account to examine your bank records so they can make a case against you. Can anyone spot the flaw in the system?</p><p>Any developer who designs a system like that deserves being sacked and then banned from ever going near a computer again.</p><p>Sadly phishers are still out there, because theyâ€™re evil, greedy people who need to be banned from the Internet for life.</p><p>Theyâ€™re thieves, digital thieves.</p></div><hr /><p><small>© 2008 - 2009 for <a href="http://indeedle.com">indeedle</a>. All rights are reserved. | For more information please visit <a href="http://indeedle.com">indeedle</a>. | <a href="http://indeedle.com/blog/2009/12/29/phishing/">Permalink</a>.</p>]]></content:encoded> <wfw:commentRss>http://indeedle.com/blog/2009/12/29/phishing/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> </channel> </rss>