On 2017-03-08 09:53, Rich Shepard wrote:
> On Wed, 8 Mar 2017, Richard Owlett wrote:
>
>> Look carefully. Our local morning TV news (SouthWest Missouri) about a
>> scam that had a very good visual imitation of the legitimate site.
>> What
>> warned the possible victim was looking carefully at the displayed URL.
>
> I strongly doubt that a fake site would ask the same security
> questions
> and accept the answers when they are correct. Not quite the second
> layer
> security of sending a one-time numeric key to my cell phone, but close
> enough.
A man in the middle or a man in the browser attack would ask the right
security questions. As soon as you provide the answers they'd put up
some fake error page and then bleed your account.
--
Michael Rasmussen, Portland Oregon
Be Appropriate && Follow Your Curiosity
_______________________________________________
PLUG mailing list
[email protected]
http://lists.pdxlinux.org/mailman/listinfo/plug