The 9 Laws of Phishing (Part 3)

Copyright © What The Hell? Security [ Part 1 | Part 2 | Part 3 ] (continued ) The 9 Laws tell us quite a bit about designing a viable platform solution.  Let’s step through them again, sketching as we go. Law 1:  Phishing Is About Commerce Web 1.0 was all about commerce.  Only we [...]

What The Hell? Phishing & Malware Misdiagnosis P2

Copyright © 2009 What The Hell? Security Referring to my previous post, here is the skinny on my Anti-Fraudulent Hot Dog Vendor Detector. Well, hold on. I’m up to Version 2.0. Before I describe that, I really should explain Version 1.0. Here’s a theoretical average day in its life.  Bear with me, there’s actually something [...]

What The Hell? Spike in Phishing & Malware Misdiagnosis

Copyright © 2009 What The Hell? Security What the hell? We have it all wrong again. Listen up everybody. This isn’t about Facebook. It’s like this. Consider the crime of stealing a credit card number in two scenarios, one offline and one online: Offline Online Victim Street Pedestrian Online Pedestrian Perpetrator Fraudulent Hot Dog Vendor* [...]

What The Hell? The Web Isn’t Supposed To Be Secure!

Copyright © 2009 What The Hell? Security There’s a really good reason that Web security is such a pain. It’s not supposed to be secure. Sorry to break it to you, but hypertext was thirty years old before we decided to use the Web as a platform for commerce.  That’s, what, three years longer than [...]

What The Hell? Moore’s Law and Web Security

Copyright © 2009 What The Hell? Security Convenient to the point I make here, the terms Moore’s Law and Hypertext were both coined in 1965. Since then, if I’m counting correctly on fingers and toes, CPUs should have improved by roughly a factor of (2 **(((2009 – 1965)*12)/18)) = 676,414,963.  The actual number doesn’t matter [...]

What The Hell? Dispose of Phishing?

Copyright © 2009 What The Hell? Security Phishing used to be a bounded phenomenon. Mirriam-Webster Online defines it as “a scam by which an e-mail user is duped into revealing personal or confidential information which the scammer can use illicitly.“ Translation: Receive an email thick with Romanian accent; click on “Click hear” [sic]; transcribe your [...]

Follow

Get every new post delivered to your Inbox.