News for hackers. Stuff that matters.

A comment on Half of All Phishing Sites Now Have the Padlock. Parent comment

Re:Half of All Phishing Sites Now Have the Padlock by hanoz on Wednesday November 28, 2018 @12:23PM (#18553390)
Banks and credit card companies have always been the absolute worst offenders for this, requiring people to use hidden iframes from all sorts of acmegenericsecure.net domains, and all the while professing to be the high priests of good practice with their absurd PCI racket, not to mention asking people to install random third party software just to use their websites because browsers apparently aren't good enough.
[ Parent | on HN ]
Re:Half of All Phishing Sites Now Have the Padlock by woodruffw on Wednesday November 28, 2018 @08:02PM (#18557265)
Chase likes to send emails from the not-at-all-suspicious "acctmanagement.com" domain[1].

[1]: https://twitter.com/8x5clPW2/status/1046244493203263488

[ Parent | on HN ]
Re:Half of All Phishing Sites Now Have the Padlock by jspash on Thursday November 29, 2018 @04:02AM (#18558963)
Google's use of gvt1.com had me convinced for the longest time that I was backdoor'd by some unknown branch of the government that was either not bright enough to cover their tracks or ballsy enough to just say "yea, it's us. the government. and we're in your computer"
[ Parent | on HN ]
Re:Half of All Phishing Sites Now Have the Padlock by Mistri on Wednesday November 28, 2018 @09:01PM (#18557480)
Their reply to your tweet pisses me off
[ Parent | on HN ]
Re:Half of All Phishing Sites Now Have the Padlock by heyoni on Thursday November 29, 2018 @12:32AM (#18558314)
Not as bad as T-Mobile defending the practice of storing passwords in plaintext!
[ Parent | on HN ]
Re:Half of All Phishing Sites Now Have the Padlock by antsar on Thursday November 29, 2018 @10:27AM (#18560865)
Defending at least implies engaging with the complaint.

Chase just said "go file a ticket". In other words, "fuck off".

[ Parent | on HN ]
Re:Half of All Phishing Sites Now Have the Padlock by smallbigfish on Wednesday November 28, 2018 @01:34PM (#18554233)
Just last year I told Ikea that they use a phishing like url in my country. Something like makeyourhomegreat.com (I can't remember the exact URL). They actually stopped using that URL but I'm not sure it was because of me or some other reason.
[ Parent | on HN ]
Re:Half of All Phishing Sites Now Have the Padlock by gruez on Wednesday November 28, 2018 @05:33PM (#18556302)
>not to mention asking people to install random third party software just to use their websites because browsers apparently aren't good enough.

is this still a thing? maybe this was true back in the days when activeX was still common, but not now.

[ Parent | on HN ]
Re:Half of All Phishing Sites Now Have the Padlock by amoshi on Wednesday November 28, 2018 @05:53PM (#18556453)
Check out Rapport, big banks prompt you to install it everytime you visit their login page.
[ Parent | on HN ]
Re:Half of All Phishing Sites Now Have the Padlock by antsar on Thursday November 29, 2018 @10:33AM (#18560911)
Which banks? Chase, BofA, and Amex do not, and I'd like to stay far away from those that do.
[ Parent | on HN ]
Re:Half of All Phishing Sites Now Have the Padlock by anoncake on Thursday November 29, 2018 @12:01AM (#18558225)
The sensible thing would be to have dedicated software for anything involving handling money, in particular banking. Then you could tell people to never interact with their bank using a web browser.
[ Parent | on HN ]