Re: [Full-disclosure] Firefox: about:blank is phisher's best friend

[Michal Zalewski <lcamtuf@xxxxxxxxxxxx>]

On Thu, 22 Feb 2007, Florian Weimer wrote:

> This is the first time I read about the forced window title change.  I
> hadn't noticed it earlier.  Do you think this is a good enough security
> indicator (or indicator of origin, to be more precise)?

This is quite inadequate as far as protecting inexperienced users is
considered - but at least offers a chance for more alert ones to notice
the problem.

Bypassing it through about:blank elliminates even this opportunity, so
we're back in square one...

/mz

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/