Gemal's Psyched Blog - Comments on Phishing Detection Support to Thunderbird checked in http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/index.html The following was just checked into the trunk of Mozilla Thunderbird: Get a phishing detector going for Thunderbird. I'm sure it can be improved quite a bit but this starts to catch some of the more obvious scams. More info... en-us Copyright 2009 Wed, 28 Jan 2009 22:48:53 +0100 Mon, 16 Feb 2009 09:35:50 +0100 http://www.movabletype.org/?v=3.17 http://blogs.law.harvard.edu/tech/rss http://gemal.dk/ http://gemal.dk//pics/favicon.png Gemal's Psyched Blog By me Good job. But most people don't know what a "URL" is. I suggest using a different term, while retaining "URL" in parentheses to be specific for technical users. Good job. But most people don't know what a "URL" is. I suggest using a different term, while retaining "URL" in parentheses to be specific for technical users.

]]> http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment1?from=rss-comment http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment1 Fri, 21 Jan 2005 12:16:31 +0100 me me@whyyyyyyy.com By Damien Guard I have to agree with the other poster that while the detection is great the sort of users it's trying to protect won't understand this message and will just click anyway.What would be great is a "Thunderbird thinks this is junk" style message at the top as you read it indicating "Thunderbird believes this message has suspicious hyperlinks that could be an attempt to steal your personal information."Or something...[) I have to agree with the other poster that while the detection is great the sort of users it's trying to protect won't understand this message and will just click anyway.

What would be great is a "Thunderbird thinks this is junk" style message at the top as you read it indicating "Thunderbird believes this message has suspicious hyperlinks that could be an attempt to steal your personal information."

Or something...

[)

]]> http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment2?from=rss-comment http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment2 Fri, 21 Jan 2005 12:57:36 +0100 Damien Guard damieng@gmail.com By minghong >Clicking "more" will then show the detail information.]]> Maybe combine both idea. Using a dialog like this:

Thunderbird thinks this is a phishing site.

                                           More >>

Clicking "more" will then show the detail information.

]]> http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment3?from=rss-comment http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment3 Fri, 21 Jan 2005 14:35:31 +0100 minghong minghong@gmail.com By Michael Romero It's important to avoid the word "phishing" as most people probably don't know what it is. I think the message should say something like "This e-mail appears to be fradulent. Click on links with care" or something, with a link to a description of what a phishing email is.Basically, my point is that in order to explain it, you should definately use laymen's terms so that it is easily understood. It's important to avoid the word "phishing" as most people probably don't know what it is. I think the message should say something like "This e-mail appears to be fradulent. Click on links with care" or something, with a link to a description of what a phishing email is.

Basically, my point is that in order to explain it, you should definately use laymen's terms so that it is easily understood.

]]> http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment4?from=rss-comment http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment4 Mon, 24 Jan 2005 08:17:33 +0100 Michael Romero mero@dimensionsix.net By Victor Bogado I agree with what most people are saying here, I think that instead of "URL" you should place "Address" that is more popular name. I also think that it could probably contain the word fraud, or something like this, and that should be very visible, to make it catch the atention of the reader. Probably instead of yes and no, that are easily recognized something other could help deincentivate the "blind click" of a button. Probably something in the line of two links "I think this is fraud" and "I trust this site". What do you think? I agree with what most people are saying here, I think that instead of "URL" you should place "Address" that is more popular name.

I also think that it could probably contain the word fraud, or something like this, and that should be very visible, to make it catch the atention of the reader. Probably instead of yes and no, that are easily recognized something other could help deincentivate the "blind click" of a button. Probably something in the line of two links "I think this is fraud" and "I trust this site".

What do you think?

]]> http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment5?from=rss-comment http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment5 Mon, 24 Jan 2005 11:53:59 +0100 Victor Bogado comment@bogado.net By Henrik Gemal I even made it to ZDNet:http://news.zdnet.co.uk/internet/security/0,39020375,39185311,00.htm I even made it to ZDNet:
http://news.zdnet.co.uk/internet/security/0,39020375,39185311,00.htm

]]> http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment6?from=rss-comment http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment6 Mon, 24 Jan 2005 20:55:05 +0100 Henrik Gemal 125d2aa2b2dc63c97c2dc28255aeda5d0c6686f0 By Supergugler And you also made it to Webwereld, a wellknown Dutch internet magazine. Thunderbird should build up a name as the most secure e-mail program around, whatever the solution for the Phishing problem will be. Only then it has a chance of taking noticable market share from Outlook (Express) And you also made it to Webwereld, a wellknown Dutch internet magazine. Thunderbird should build up a name as the most secure e-mail program around, whatever the solution for the Phishing problem will be. Only then it has a chance of taking noticable market share from Outlook (Express)

]]> http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment7?from=rss-comment http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment7 Tue, 25 Jan 2005 13:58:51 +0100 Supergugler t.guichelaar@gmail.com By Joshua Tauberer I've somewhat recently written a Thunderbird extension that looks for phishing in a different way -- using SPF and DomainKeys on the From: address. See: http://taubz.for.net/code/spf I've somewhat recently written a Thunderbird extension that looks for phishing in a different way -- using SPF and DomainKeys on the From: address. See: http://taubz.for.net/code/spf

]]> http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment8?from=rss-comment http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment8 Tue, 25 Jan 2005 17:08:40 +0100 Joshua Tauberer tauberer@for.net By bloodnok phishing detection needs options to allow you to tell it to ignore certain emails/addresses. email from my support droids gets tagged everytime. phishing detection needs options to allow you to tell it to ignore certain emails/addresses. email from my support droids gets tagged everytime.

]]> http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment9?from=rss-comment http://gemal.dk/blog/2005/01/21/phishing_detection_support_to_thunderbird_checked_in/#comment9 Tue, 21 Mar 2006 16:33:31 +0100 bloodnok 3aff4d3660a04391270fd1287e804949756f312c