Copyright © 2009 What The Hell? Security
There’s a really good reason that Web security is such a pain. It’s not supposed to be secure.
Sorry to break it to you, but hypertext was thirty years old before we decided to use the Web as a platform for commerce. That’s, what, three years longer than the span between the launches of MS-DOS 1.0 and Windows 7.
Plenty of time to work out a few security kinks, if there were any. But there aren’t, because security was out of scope when hypertext was designed. As it remained when the Web was designed. As it remains today.
So happens when you run a multi-trillion dollar marketplace atop an insecure platform? Phishing is what happens. Drive-by malware. Fraud.
When you think about it, if there’s anything remarkable about Web fraud, it’s that we experience as little of it as we do.
