Re: [Full-disclosure] Re: Most common keystroke loggers?

[Michael Holstein <michael.holstein@xxxxxxxxxxx>]

> If the user is passed to a phishing site that ask for the OTP, the user
> enters it, the phishing site can return a error and instruct the user to
> use the next OTP password, hence giving the attacker any number of
> OTP....the OTP ones that are list based anyways.

Social Darwinism :

Try to make something idiot-proof, nature will provide you with a better 
idiot.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/