<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
		>
<channel>
	<title>Comments on: Stop Phishing: Websites and Users Working Together</title>
	<atom:link href="http://paralleldivergence.com/2010/02/05/stop-phishing-websites-and-users-working-together/feed/" rel="self" type="application/rss+xml" />
	<link>http://paralleldivergence.com/2010/02/05/stop-phishing-websites-and-users-working-together/</link>
	<description>just when you think you've got it all together</description>
	<lastBuildDate>Sat, 21 Jan 2012 09:00:10 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
	<item>
		<title>By: paralleldivergence</title>
		<link>http://paralleldivergence.com/2010/02/05/stop-phishing-websites-and-users-working-together/#comment-11252</link>
		<dc:creator><![CDATA[paralleldivergence]]></dc:creator>
		<pubDate>Sat, 06 Feb 2010 04:54:29 +0000</pubDate>
		<guid isPermaLink="false">http://paralleldivergence.com/?p=285#comment-11252</guid>
		<description><![CDATA[It would be a worse pain to get your accounts phished though...]]></description>
		<content:encoded><![CDATA[<p>It would be a worse pain to get your accounts phished though&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Simon</title>
		<link>http://paralleldivergence.com/2010/02/05/stop-phishing-websites-and-users-working-together/#comment-11251</link>
		<dc:creator><![CDATA[Simon]]></dc:creator>
		<pubDate>Sat, 06 Feb 2010 04:30:14 +0000</pubDate>
		<guid isPermaLink="false">http://paralleldivergence.com/?p=285#comment-11251</guid>
		<description><![CDATA[Certainly a username/password seems to be a very weak way of securing some of our most personal information.

But, it would be a mighty pain if you went overseas and forgot to set Gmail to &#039;holiday mode&#039;.]]></description>
		<content:encoded><![CDATA[<p>Certainly a username/password seems to be a very weak way of securing some of our most personal information.</p>
<p>But, it would be a mighty pain if you went overseas and forgot to set Gmail to &#8216;holiday mode&#8217;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: dskmag</title>
		<link>http://paralleldivergence.com/2010/02/05/stop-phishing-websites-and-users-working-together/#comment-11250</link>
		<dc:creator><![CDATA[dskmag]]></dc:creator>
		<pubDate>Sat, 06 Feb 2010 00:15:16 +0000</pubDate>
		<guid isPermaLink="false">http://paralleldivergence.com/?p=285#comment-11250</guid>
		<description><![CDATA[Some great ideas and perhaps as companies need realise that they don&#039;t own their &#039;space&#039; but merely inhabit an un-governed digital realm where no one needs to plan, agree of even admit to anything.

I think of it like the pied piper. Its not the piper or the pipe that attracted the rats - it was the music. Companies create compelling reasons to enter the metaverse and make huge assumptions on the part of those accessing their offerings. The focus on the least-worst scenario for themselves, then the users.

It seems inevitable that the internet as we know it now - popularised by commercial offerings and now sucking in so called &#039;crowd content&#039; via social networks will suffer a Snow Crash.

I think any real change in the current fraud will come not from more virus checkers or browser blockers, but from devices that act as agents for us, creating a DMZ between us an what ever parts of the metaverse we choose to use.]]></description>
		<content:encoded><![CDATA[<p>Some great ideas and perhaps as companies need realise that they don&#8217;t own their &#8216;space&#8217; but merely inhabit an un-governed digital realm where no one needs to plan, agree of even admit to anything.</p>
<p>I think of it like the pied piper. Its not the piper or the pipe that attracted the rats &#8211; it was the music. Companies create compelling reasons to enter the metaverse and make huge assumptions on the part of those accessing their offerings. The focus on the least-worst scenario for themselves, then the users.</p>
<p>It seems inevitable that the internet as we know it now &#8211; popularised by commercial offerings and now sucking in so called &#8216;crowd content&#8217; via social networks will suffer a Snow Crash.</p>
<p>I think any real change in the current fraud will come not from more virus checkers or browser blockers, but from devices that act as agents for us, creating a DMZ between us an what ever parts of the metaverse we choose to use.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Russell Darnley</title>
		<link>http://paralleldivergence.com/2010/02/05/stop-phishing-websites-and-users-working-together/#comment-11248</link>
		<dc:creator><![CDATA[Russell Darnley]]></dc:creator>
		<pubDate>Sat, 06 Feb 2010 00:05:52 +0000</pubDate>
		<guid isPermaLink="false">http://paralleldivergence.com/?p=285#comment-11248</guid>
		<description><![CDATA[A friend just had $3000 skimmed from his account, this week.  Not sure whether it was the result of phishing, but this is a timely post.  Something as simple is this should be easily achievable.

My bank was advised of my recent trip to Indonesia, for the simple reason that they monitor unusual activity and wanted to know about it. I felt very well serviced and supported.

Thanks Stu.]]></description>
		<content:encoded><![CDATA[<p>A friend just had $3000 skimmed from his account, this week.  Not sure whether it was the result of phishing, but this is a timely post.  Something as simple is this should be easily achievable.</p>
<p>My bank was advised of my recent trip to Indonesia, for the simple reason that they monitor unusual activity and wanted to know about it. I felt very well serviced and supported.</p>
<p>Thanks Stu.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: paralleldivergence</title>
		<link>http://paralleldivergence.com/2010/02/05/stop-phishing-websites-and-users-working-together/#comment-11247</link>
		<dc:creator><![CDATA[paralleldivergence]]></dc:creator>
		<pubDate>Fri, 05 Feb 2010 23:52:59 +0000</pubDate>
		<guid isPermaLink="false">http://paralleldivergence.com/?p=285#comment-11247</guid>
		<description><![CDATA[Yes, there are methods for spoofing IP addresses - making your PC pretend it&#039;s IP address from a trusted location - eg - your country. But it&#039;s an extra step that the crooks would have to take. But move it one step in the future where we have IPv6, web service providers can implement encryption and authentication which will also reduce spoofing threats.

If they were to use a proxy, they would have to use a proxy in the victim&#039;s country.

You could also extend the restriction for logon as not just from your country, but from your chosen Internet Service Provider(s). You could save the specific domains you&#039;d like to allow access from - eg your home and your work domains - but not from Starbucks or McDonalds (or anywhere else).

You then could choose to apply these restrictions only to your vulnerable accounts, leaving you more flexibilty with web services that you are less worried about security-wise.

The point is, this idea is a simple springboard. It&#039;s not the be-all-and-end-all solution to this massive problem, but it&#039;s a pretty good, easy to implement, inexpensive solution that can be extended.]]></description>
		<content:encoded><![CDATA[<p>Yes, there are methods for spoofing IP addresses &#8211; making your PC pretend it&#8217;s IP address from a trusted location &#8211; eg &#8211; your country. But it&#8217;s an extra step that the crooks would have to take. But move it one step in the future where we have IPv6, web service providers can implement encryption and authentication which will also reduce spoofing threats.</p>
<p>If they were to use a proxy, they would have to use a proxy in the victim&#8217;s country.</p>
<p>You could also extend the restriction for logon as not just from your country, but from your chosen Internet Service Provider(s). You could save the specific domains you&#8217;d like to allow access from &#8211; eg your home and your work domains &#8211; but not from Starbucks or McDonalds (or anywhere else).</p>
<p>You then could choose to apply these restrictions only to your vulnerable accounts, leaving you more flexibilty with web services that you are less worried about security-wise.</p>
<p>The point is, this idea is a simple springboard. It&#8217;s not the be-all-and-end-all solution to this massive problem, but it&#8217;s a pretty good, easy to implement, inexpensive solution that can be extended.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ian Gay</title>
		<link>http://paralleldivergence.com/2010/02/05/stop-phishing-websites-and-users-working-together/#comment-11246</link>
		<dc:creator><![CDATA[Ian Gay]]></dc:creator>
		<pubDate>Fri, 05 Feb 2010 21:55:45 +0000</pubDate>
		<guid isPermaLink="false">http://paralleldivergence.com/?p=285#comment-11246</guid>
		<description><![CDATA[Some great thoughts Stu and a needed reminder for myself about this whole issue. 

I must admit that when I recently opened a Facebook account for the first time (to keep in contact with my son overseas) I did not give true information for my school or date of birth. While I could see the benefits to Facebook of such information (their ability to match potential contacts or associates is amazing), I really couldn&#039;t see myself giving such valuable information freely.

Your idea to restrict logons etc from the country of registration is good but a small question; would a proxy ip site be able to confuse the country that the logon was coming from? I don&#039;t know enough about it but I have read of these sites being used to fool other sites and download movies etc supposed to be for USA only or similar.

There is no doubt that that the whole identity issue is a huge one. Possibly another thought I have is that my Credit Union has issued me with a small electronic device that gives me a 6 digit code (different every time, changes every 60 seconds) that I must use in addition to my normal password to access my account. Not sure how it could be implemented for Facebook etc but I could see my ISP being able to do this sort of thing; certainly, to me, every bank should be doing something similar.]]></description>
		<content:encoded><![CDATA[<p>Some great thoughts Stu and a needed reminder for myself about this whole issue. </p>
<p>I must admit that when I recently opened a Facebook account for the first time (to keep in contact with my son overseas) I did not give true information for my school or date of birth. While I could see the benefits to Facebook of such information (their ability to match potential contacts or associates is amazing), I really couldn&#8217;t see myself giving such valuable information freely.</p>
<p>Your idea to restrict logons etc from the country of registration is good but a small question; would a proxy ip site be able to confuse the country that the logon was coming from? I don&#8217;t know enough about it but I have read of these sites being used to fool other sites and download movies etc supposed to be for USA only or similar.</p>
<p>There is no doubt that that the whole identity issue is a huge one. Possibly another thought I have is that my Credit Union has issued me with a small electronic device that gives me a 6 digit code (different every time, changes every 60 seconds) that I must use in addition to my normal password to access my account. Not sure how it could be implemented for Facebook etc but I could see my ISP being able to do this sort of thing; certainly, to me, every bank should be doing something similar.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: darcymoore</title>
		<link>http://paralleldivergence.com/2010/02/05/stop-phishing-websites-and-users-working-together/#comment-11245</link>
		<dc:creator><![CDATA[darcymoore]]></dc:creator>
		<pubDate>Fri, 05 Feb 2010 20:58:29 +0000</pubDate>
		<guid isPermaLink="false">http://paralleldivergence.com/?p=285#comment-11245</guid>
		<description><![CDATA[...I felt vulnerable last weekend as phishing scams are so...well, everywhere! Good ideas here, Stu!]]></description>
		<content:encoded><![CDATA[<p>&#8230;I felt vulnerable last weekend as phishing scams are so&#8230;well, everywhere! Good ideas here, Stu!</p>
]]></content:encoded>
	</item>
</channel>
</rss>

