Re:How script kiddies can hijack your browser to steal your ...
by gojomo on Sunday December 02, 2012 @10:10PM
(#4863712)
Your OS/browser already identifies itself, so they know which look to fake.
The trick is to convince someone to try finding something sensitive on the page. This might be done by showing a long list of 'leaked' passwords or social-security-numbers.
Even without explicit prompting, some people might Ctrl-F search for their own, with a false confidence that a local search isn't shared with the page.
The trick is to convince someone to try finding something sensitive on the page. This might be done by showing a long list of 'leaked' passwords or social-security-numbers.
Even without explicit prompting, some people might Ctrl-F search for their own, with a false confidence that a local search isn't shared with the page.