| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
1.4.9 Social Engineering (Page 3 of 3) Phishing I first approached this topic in early 2003 (Identiy Theft at the Speed of The Internet) and in the last update of this work suggested it would be the topic of 2003. Well, here we are marching our way through 2004 and yes the US Government agrees that Identity Theft is the fastest growing issue. As I write this update, Im getting several Phishing emails a day. They claim to be someone I may or may not actually be dong commerce with and the email claims it needs updated information. The latest wrinkle has been that Tcat.net is updating its mail server and they need X data. Amusing since I am the sole user of Tcat.net or TcatU.net ;-) and the true and only administrator of those domains. Well folks, SY0-101 does not address phishing. It is too new an issue. That doesnt let you off the hook of educating your users. And phishing has become very tricky, attempting to show a padlock indicating SSL is in use, as reported in the footnote 85. __________________ 85. http://news.netcraft.com/archives/2004/03/08/ssls_credibility_as_phishing_defense_is_tested.html
Home - Table Of Contents - Contact Us CertiGuide for Security+ (http://www.CertiGuide.com/secplus/) on CertiGuide.com Version 1.0 - Version Date: November 15, 2004 Adapted with permission from a work created by Tcat Houser et al. CertiGuide.com Version © Copyright 2004 Charles M. Kozierok. All Rights Reserved. Not responsible for any loss resulting from the use of this site. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||