News for hackers. Stuff that matters.

A comment on This link says it's from YouTube but it's not. Parent comment

Re:This link says it's from YouTube but it's not by ced on Tuesday April 13, 2010 @12:55AM (#1261191)
Isn't this incredibly simple to defeat? The phishing site can send your username to the real bank's website and retrieve the image.
[ Parent | on HN ]
Re:This link says it's from YouTube but it's not by sagarm on Tuesday April 13, 2010 @07:11PM (#1263656)
If you do that, the bank will notice a bunch of connections from the same IP for different usernames.

You could use a botnet to do the lookups, but that still makes the attack substantially more difficult.

[ Parent | on HN ]