Comments on: PayPal: Phishing, Fundraising, And In The Lab http://gigaom.com/2007/10/04/paypal-phishing-fundraising-and-in-the-lab/ Trusted Insights and Conversations on the Next Wave of Technology Thu, 26 Nov 2009 01:34:40 +0000 http://wordpress.com/ hourly 1 By: cyberpenguin http://gigaom.com/2007/10/04/paypal-phishing-fundraising-and-in-the-lab/#comment-857160 cyberpenguin Sat, 19 Jan 2008 20:24:20 +0000 http://gigaom.com/2007/10/04/paypal-phishing-fundraising-and-in-the-lab/#comment-857160 <p>How can we verify that the PayPal Labs site you've listed is legit? I've searched at the actual PayPal site, & can't find any references to widget development like this?</p> How can we verify that the PayPal Labs site you’ve listed is legit? I’ve searched at the actual PayPal site, & can’t find any references to widget development like this?

]]> By: Standard Deviations » I’m on GigaOM - Sorta http://gigaom.com/2007/10/04/paypal-phishing-fundraising-and-in-the-lab/#comment-645037 Standard Deviations » I’m on GigaOM - Sorta Sat, 03 Nov 2007 05:15:24 +0000 http://gigaom.com/2007/10/04/paypal-phishing-fundraising-and-in-the-lab/#comment-645037 <p>[...] enough, here it is - an article on PayPal fishing, something I wrote about a while [...]</p> [...] enough, here it is – an article on PayPal fishing, something I wrote about a while [...]

]]> By: Matt Cox http://gigaom.com/2007/10/04/paypal-phishing-fundraising-and-in-the-lab/#comment-596409 Matt Cox Fri, 05 Oct 2007 18:41:40 +0000 http://gigaom.com/2007/10/04/paypal-phishing-fundraising-and-in-the-lab/#comment-596409 <p>Why doesn't Yahoo! actually do something <em>really</em> good and respectable in working with a company such as Phishtank (http://www.phishtank.com) to have each external-linking url received in your Inbox emails run through Phishtank's Fraud Protection check before redirecting you.</p> <p>With Phishtank's loyal and committed user-base submitting fraudulent urls to the database by the minute, it'll ensure a lot more security for Yahoo! Mail users.</p> <p>I've noticed most Yahoo! links run through some weird tracking url first - especially from search results. Can in-body links in email not display as:</p> <p>http://phishtank.yahoo.com/fraudcheck?url=http://www.royalbankofscotland.givemeyourbankdetails.com</p> <p>Which then, on clicking, performs the fraud check and takes you through to your website instantly if no problems were found. If the url were believed to be fraudulent, it could show a Yahoo! branded screen.</p> <p>"We believe this page may be fraudulent. Continue at your own risk:</p> <p>http://www.royalbankofscotland.givemeyourbankdetails.com (active link)"</p> <p>Surely spending some Yahoo! cash on something like this would be far better for the internet than making another social network (Mash doesn't seem to cut it just yet, and will be just full of idiots, like 360 is).</p> Why doesn’t Yahoo! actually do something really good and respectable in working with a company such as Phishtank (http://www.phishtank.com) to have each external-linking url received in your Inbox emails run through Phishtank’s Fraud Protection check before redirecting you.

With Phishtank’s loyal and committed user-base submitting fraudulent urls to the database by the minute, it’ll ensure a lot more security for Yahoo! Mail users.

I’ve noticed most Yahoo! links run through some weird tracking url first – especially from search results. Can in-body links in email not display as:

http://phishtank.yahoo.com/fraudcheck?url=http://www.royalbankofscotland.givemeyourbankdetails.com

Which then, on clicking, performs the fraud check and takes you through to your website instantly if no problems were found. If the url were believed to be fraudulent, it could show a Yahoo! branded screen.

“We believe this page may be fraudulent. Continue at your own risk:

http://www.royalbankofscotland.givemeyourbankdetails.com (active link)”

Surely spending some Yahoo! cash on something like this would be far better for the internet than making another social network (Mash doesn’t seem to cut it just yet, and will be just full of idiots, like 360 is).

]]> By: Saptarshi http://gigaom.com/2007/10/04/paypal-phishing-fundraising-and-in-the-lab/#comment-596000 Saptarshi Fri, 05 Oct 2007 12:41:12 +0000 http://gigaom.com/2007/10/04/paypal-phishing-fundraising-and-in-the-lab/#comment-596000 <p>Isn't domain keys already a pretty old standard in terms of email?? The only thing is that ebay/paypal are starting to use it now...</p> Isn’t domain keys already a pretty old standard in terms of email?? The only thing is that ebay/paypal are starting to use it now…

]]>