[ale] Scariest cross-platform attack - ever!

[Scott Castaline]

On 06/04/2010 09:22 PM, Chris Fowler wrote:
> Wow.
>
> I moved from that site then went back and saw the gmail login page.  I
> almost bit.  I then remembered the previous page and also remembered
> that I never log into gmail from the web.  I use Evolution and gmail's
> IMAP support.
>
> That is a nasty one.
>
> On Fri, 2010-06-04 at 19:58 -0400, Robert Reese wrote:
>> This scares the crap out of me, and I'm virtually impervious to the fear of internet threats:
>>
>> http://www.azarask.in/blog/post/a-new-type-of-phishing-attack/
>>
>>
>> Keep reading past the video, and then consider what the future could hold as this type of threat evolves over the next couple of years...
>>
>> Sweet dreams,
>> Robert~
>>
>> P.S. - The page also acts as a demonstration!
>>
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> http://mail.ale.org/mailman/listinfo/ale
>> See JOBS, ANNOUNCE and SCHOOLS lists at
>> http://mail.ale.org/mailman/listinfo
>
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>
Hitting reload current page will bring you back to the correct page. For 
some reason I've always done that if I return to a stale tab that I may 
have forgotten about, or I just close it and then go to the site form 
bookmarks. Also I noticed that noscripts blocks it from happening as 
well. Only problem now is how do you know whether it's truly safe to 
allow on a site or not allow?