Fight Phishing – The Perfect Plan

admin — Wed, 24 Jun 2009 17:42:59 +0000

I have devised a simple approach to the ever-growing problem of Internet Phishing.

Having worked on the Internet since its birth, I have been keenly aware of this problem; watching it grow in a non-linear fashion in recent years. There are numerous technology solutions; some quite complex and annoying. But this is really not a technology problem. It is a human problem.
We need help, as human beings, in managing our Internet experience.

I have a solution. I ask you to bear with me – understand how this works – and indulge me in giving it a try. Together, we may just revolutionize the safety of the Internet!

Whenever you log into a site, get in to the habit of FIRST entering an incorrect password.
“That sounds ludicrous!”, I hear you shouting. Well think about it this way.
Suppose I am logging into my mortgage bank. This is a site I go to barely twice a year. The big banks are also prime targets for Phishing.
The victim of a successful phishing attempt will provide a valid username and associated password – believing she is logging into the bank site – to the criminal. And what’s more disturbing, the victim is completely unaware it even happened!

With my plan to fight Phishing this changes.

If I have correctly arrived at my bank’s site, it will:
a. recognize my erroneous entry
b. prompt me to try again
On that second attempt I will successful access my account

If this is a phishing site it will

a. gladly accept my first entry – pretending to log me into my bank site – having STOLEN my username and the password I provided. This is because, as a phony site, it does not know my password and cannot detect that my entry was invalid.
b. The phisher has NOT SUCCESSFULLY stolen my login information
c. I am instantly alerted to the fact that something is wrong

#Revenge on the bad guys
What’s more noteworthy is that I have provided the phisher useless infromation. He will sell the set of username/passwords collected and, over time, be recognized as a bad source when a large number of them are incorrect.

I think it is a perfect plan! If we all make the committment to inconvenience ourselves just a little there might be a day that phishing is extinct!

I know where you live

admin — Sun, 01 Mar 2009 03:09:48 +0000

I was cleaning up all the trash in the neighborhood that seems to blow right down to the wooded area in front of my house*.
Along with the usual beer cans and used condoms [parents, you really need to be aware of what your college student is doing while away from home] I uncovered this piece of discarded mail.
Armed with this name, address and account number a [not so] skilled identity thief could start opening accounts in this person’s name; stealing goods and further damaging her credit.
It only takes one search on Google to reveal a Facebook page full of personal details.

Heed this warning. Be more careful with your personal information. Purchase a shredder and use it (But do not let your trash be compromised by outdoor creatures who will leave that stuff strewn all over the neighborhood).

Honestly, I was angry and frustrated when I began writing this and had planned to post a close-up of the letter; which has a complete name, address and account number. But as I was editing this post God reminded me that would be wrong. Praise Jesus for his influence on my life!

*It is frustrating and infuriating how these residents (primarily the college students who are renting; 6 and 8 to a house) will gladly put the trash at the curb but refuse to take any responsibility for it after that. Trash bags sitting on the curb are desirable targets for stray cats and the wild animals that live in the nature preserve next door.

Wistful Thinking » Identity Theft

Fight Phishing – The Perfect Plan

I know where you live