Re:If malware authors ever learn how to spell we're all screwed
by politician on Friday June 29, 2012 @06:00PM
(#4179340)
It doesn't -- at all -- the obvious workaround is to extend the middleman game a little longer and pass the user's answer to the site.
[ Parent
| on HN ]
Re:If malware authors ever learn how to spell we're all screwed
by yuliyp on Friday June 29, 2012 @11:19PM
(#4180366)
It does in that if the real site properly stores a cookie that records that you've logged in from there before, the number of times that the user is asked for such questions goes down, increasing suspicion when the user actually IS asked for them.
Security is never about 100% guarantees. It's about reducing the exploitability and impact of weaknesses.
Re:If malware authors ever learn how to spell we're all screwed
by hexagonc on Friday June 29, 2012 @11:05PM
(#4180333)
It mitigates a little. It should make you a little suspicious if the site suddenly starts complaining that you're accessing it from an unrecognized computer if you really haven't. I'd close the tab in that case.