Using the HTML5 Fullscreen API for Phishing Attacks

Re:Using the HTML5 Fullscreen API for Phishing Attacks by halfasleep on Tuesday October 09, 2012 @03:10AM (#4630366)

I also prefer Firefox's handling of SSL issues. Allowing permanent whitelisting of sites reduces the number of times a user will see the warning, reducing the muscle memory around clicking proceed anyway.

[ Parent | on HN ]

Re:Using the HTML5 Fullscreen API for Phishing Attacks by graue on Tuesday October 09, 2012 @03:29AM (#4630417)

That's a great point. I didn't even think of the muscle memory issue, but by having the exception be permanent by default, they got that right too.

[ Parent | on HN ]

Re:Using the HTML5 Fullscreen API for Phishing Attacks by feross on Tuesday October 09, 2012 @03:35AM (#4630435)

The point about "muscle memory" is great and definitely not discussed enough.

[ Parent | on HN ]