On Thursday 09 June 2005 02:11, Daniel Veditz wrote:

> Raising the profile of the various extensions is a great idea, that will
> speed up the feedback cycle.


Right.  Now we need someone inside Mozilla to drive this
process forward.  It can't be done from outside.  Someone
inside has to champion the issue - distro the info and the
proposed solutions to the various module leaders, create
the public image on the website, advise users of how to
deal with phishing, bring the key players together to craft
a policy, decide how much of Mozilla's budget to allocate
to this, let users out there know that there are solutions,
reach out and collect the experience, share it with the
solution thinkers and coders, write articles for the 'zine,
etc etc.

Here's the basic numbers.  Consider this a starting position.

  Losses from phishing are $1.2 billion per year.

  Phishing pretty much goes through the browser because
  that's got the FORM.  Hooks mostly come via email, but that is
  changing as pharming and IM are being experimented with
  (6 months at least).

  Mozilla has an 8% browser market share?

  Superficial maths - $100 million dollars are at risk among
  Mozilla users.  Per year, and rising.

Now, we can lower those numbers but that's not the point.
The point is that it's huge even if you can knock a zero off.
You'll need to knock two zeros off to get it to numbers that
Mofo can deal with, I'm guessing.


iang
-- 
Advances in Financial Cryptography:
   https://www.financialcryptography.com/mt/archives/000458.html
_______________________________________________
Mozilla-security mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-security

Reply via email to