News for hackers. Stuff that matters.

A comment on Burying the URL. Parent comment

Re:Burying the URL by MereInterest on Thursday May 01, 2014 @08:22AM (#7679294)
No, because I know that I drove down the same street, parked in the same parking lot, and walked through the same door. The URL should always be visible so that I can glance up and see if I am in a familiar place before putting in a username/password.
[ Parent | on HN ]
Re:Burying the URL by lmm on Thursday May 01, 2014 @09:39AM (#7679630)
The point of this is that you see and compare the domain before putting in a username/password. That's probably more reliable than comparing a full URL - the difference between y0urbank.com and yourbank.com is much more obvious than the difference between y0urbank.com/?bunch/of/state=whatever and yourbank.com/?bunch/of/state=whatever
[ Parent | on HN ]
Re:Burying the URL by rspeed on Thursday May 01, 2014 @09:48AM (#7679676)
The component of the URL you check when avoiding phishing attack (the domain) is still displayed.
[ Parent | on HN ]