Comments on: Phishing in Plain English

Phishing in Plain English

dbarefoot — Tue, 21 Oct 2008 22:13:51 -0800

The latest paper-based video from the folks at Common Craft. This video explains the ins and outs of phishing scams. Show it to your less web-savvy brethren.

By: mathowie

mathowie — Tue, 21 Oct 2008 23:50:06 -0800

Very nice work. They should do a video on everything a new internet user should know (instead of explaining twitter or rss (which they did a great job of), explain how bcc and cc work in email, and how to properly quote and trim replies and HOW TO CHANGE YOUR FONT SIZE SO YOU CAN READ IT).

By: harriet vane

harriet vane — Wed, 22 Oct 2008 03:25:35 -0800

Thanks for posting this - have sent it on to my mum and other family :)

By: mannequito

mannequito — Wed, 22 Oct 2008 03:34:38 -0800

HI I M from Nigeria your video like very much I lern English an how too phish all at same time thank u

By: mandal

mandal — Wed, 22 Oct 2008 05:11:05 -0800

..but give a man a phishing site and you feed him for a lifetime. When people aren't sure about a site, if they are going to go ahead and enter some information, I wish they'd get in the habit of entering a bogus username and password first. The phishing sites don't have your details to check against.

By: jasonhong

jasonhong — Wed, 22 Oct 2008 12:55:58 -0800

I like this video, though one concern I have is that, based on our research at Carnegie Mellon University, raising awareness about phishing is not sufficient, and tends to lead to more paranoia rather than actual ability to protect oneself. Videos like this are a good first step, but not sufficient. One item of interest previously mentioned on MeFi: we've done a large field trial of several thousands of people with our game Anti-Phishing Phil, showing that after playing our game, people are better at detecting phish correctly while not incorrectly thinking real sites are fake. We've also been working with the Anti-Phishing Working Group in developing better training materials. You might be seeing this landing page for phishing sites that have been taken down. We also have a lot of cartoons for teaching people about phishing available at phishguru.org. (Some context and discloures: I'm a professor at Carnegie Mellon University working on anti-phishing training and anti-phishing filters for email and web. I'm also a co-founder of Wombat Security Technologies, a startup to commercialize our work).