Copyright © 2009 What The Hell? Security
Referring to my previous post, here is the skinny on my Anti-Fraudulent Hot Dog Vendor Detector.
Well, hold on. I’m up to Version 2.0. Before I describe that, I really should explain Version 1.0. Here’s a theoretical average day in its life. Bear with me, there’s actually [...]
Filed under: Uncategorized | Tagged: fraud, malware, phishing | Leave a Comment »
Copyright © 2009 What The Hell? Security
What the hell? We have it all wrong again.
Listen up everybody. This isn’t about Facebook.
It’s like this. Consider the crime of stealing a credit card number in two scenarios, one offline and one online:
Offline
Online
Victim
Street Pedestrian
Online Pedestrian
Perpetrator
Fraudulent Hot Dog Vendor*
Fraudulent HTML Author
Scene
Street Corner
Any Website
Bait
Hot Dog
Link or Form
Innocent Act
Handing [...]
Filed under: Uncategorized | Tagged: fraud, hypertext, malware, phishing | Leave a Comment »
Copyright © 2009 What The Hell? Security
There’s a really good reason that Web security is such a pain. It’s not supposed to be secure.
Sorry to break it to you, but hypertext was thirty years old before we decided to use the Web as a platform for commerce. That’s, what, three years longer than the [...]
Filed under: Uncategorized | Tagged: fraud, hypertext, malware, phishing | Leave a Comment »
Copyright © 2009 What The Hell? Security
Convenient to the point I make here, the terms Moore’s Law and Hypertext were both coined in 1965.
Since then, if I’m counting correctly on fingers and toes, CPUs should have improved by roughly a factor of (2 **(((2009 – 1965)*12)/18)) = 676,414,963. The actual number doesn’t matter because I’m [...]
Filed under: Uncategorized | Tagged: fraud, malware, phishing, security soapbox | Leave a Comment »
Copyright © 2009 What The Hell? Security
Phishing used to be a bounded phenomenon. Mirriam-Webster Online defines it as “a scam by which an e-mail user is duped into revealing personal or confidential information which the scammer can use illicitly.“
Translation: Receive an email thick with Romanian accent; click on “Click hear” [sic]; transcribe your PayPal [...]
Filed under: Uncategorized | Tagged: fraud, malware, phishing | Leave a Comment »
Copyright © 2009 What The Hell? Security
Q: What do phishing and drive-by malware have in common?
A: They’re both irrelevant before you click.
Simple, isn’t it? Eh, not so much.
If it were simple, there’d be an accurate way to anticipate the result of clicking. On links and “Submit” buttons I mean.
Yeah, I know what you’re gonna say. [...]
Filed under: Uncategorized | Tagged: fraud, hypertext, malware, phishing | Leave a Comment »
Copyright © 2009 What The Hell? Security
Not sure about you, but I’m heartened by the fact that phishing and drive-by malware are working so well today. It means the Web is in tip-top shape.
Think about it. A Web that doesn’t display persuasive content, or execute retrieved code, would be irrelevant to [...]
Filed under: Uncategorized | Tagged: fraud, malware, phishing | Leave a Comment »
