236 Comments
- madctch, on 10/10/2007, -2/+126Wouldn't it be great if that site was actually a giant phishing operation?
- faithhealer, on 10/10/2007, -10/+119I didn't really agree with the results of the quiz. Using grammar errors or incorrect logos is not a reliable way of determining whether a web page is genuine. What if the scammers get that stuff right? If I could not see the URL, I said the page was invalid, regardless of whether the page looked right--I think this is the right approach, but the quiz said I was wrong.
- AverageJoe, on 10/10/2007, -0/+55isnt it ironic how the link the the quiz is a tinyurl, a ploy often used in online scams? when i first saw the link, i thought that WAS the scam quiz, as in, if clicked, would play the you are an idiot .swf....
- wiifm69, on 10/10/2007, -2/+54Those spammers really needed to pay more attention in English
- goeatsmsht, on 10/10/2007, -3/+50Me fail English? That unpossible!
- meshman, on 10/10/2007, -1/+45Indeed, the primary way of identifying them is by the URL they won't show you. Obscure grammatical mistakes wouldn't be noticed by many people.
- TehSwat, on 10/10/2007, -0/+43Has your credit card been stolen?! Enter it here to find out!
- Niddik, on 10/10/2007, -0/+40Direct Link: http://www.siteadvisor.com/quizzes/phishing_0707/
- DivisibleByZero, on 10/10/2007, -1/+39"Visit http://tinyurl.com/ytec4u to take the quiz."
Makes it seem like the whole thing's a scam... - dbhaley, on 10/10/2007, -28/+66Hey Everyone!! Tell me your score, because I REALLY give a *****!
- marm0lade, on 10/10/2007, -3/+39Submitter: next time link directly to the quiz, not some site to boost it's traffic. jackass. kthxbye.
- timusca, on 10/10/2007, -10/+45I got 9/10 right... but to be fair, Question #9 is *****. Just because I didn't know what another name for phishing is, doesn't mean I wouldn't be able to spot it.
- g00ee, on 10/10/2007, -0/+31First two are obvious with the URL. The rest don't show the URL but have grammar mistake / missing links? That's ridiculous! Phishers could just copy the actual pages and not have to worry about making mistakes.
- revenge7, on 10/10/2007, -2/+338/10
- ACrazyGerman, on 10/10/2007, -1/+28They are ***** they use IE
- gr3yn3t, on 10/10/2007, -1/+28holy blogspam batman!
http://www.siteadvisor.com/quizzes/phishing_0707/ - falstaff, on 10/10/2007, -0/+27Ironically, the link to the quiz is hidden behind TinyURL. One way I avoid strange sites is to disable javascript from changing the status bar, and checking whether the URL in the page matches the URL in the status bar. TinyURL is a good idea in some cases, but you've always got to be careful. Using it in a article about being careful online is beyond stupid.
- f4nt0m4s, on 10/10/2007, -3/+26if you still use myspace you deserve to get ***** over anyway
- norman619, on 10/10/2007, -0/+21I love how the site explination of why they knew the site was bogus missed some pretty damn obvious clues like the wrong web address.
- mogus, on 10/10/2007, -1/+21Me, too. Question #1: List the most common username and password you use to log in to your internet banking.
- haydentech, on 10/10/2007, -1/+18In all seriousness, if phishers actually spell-checked and grammar-checked their e-mail the number of people duped would go through the roof. Phishers are quite sophisticated with setting up bogus sites and mass mailing millions of people, so it's a real mystery why they can't manage to speak proper English.
- logicalnoise, on 10/10/2007, -5/+209/10 because the last question is a trick question. they redicule the phishers for being vague then they use a vague question. I knew an SSL encryption can be spoofed but if you check the badge you should be able to tell. As well as checking the secure icon on your browser(hopefully not IE). also reading the text on a page is worthless. They missed about 5 key things on each screen like poor layout, basically really asking for information instead of just requesting it. They missed a lot.
- Firehed, on 10/10/2007, -0/+133/10. Now where's my $23 million from your recently-deceased uncle, Prince of Nigeria?
- skankyBacon, on 10/10/2007, -0/+13I got 10/10, but going over the answers, I was surprised at how many of the grammatical errors I missed (and I'm even a bit of a grammar Nazi). I guess I've been reading Digg too much. Most of them you can just sort of sense.
- inactive, on 10/10/2007, -1/+14Well said, that quiz was inefficient. I have no need to read emails that thoroughly to spot a scam. Simple URL checking/proof-reading to valid the source is sufficient enough.
- Tippis, on 10/10/2007, -0/+13...and some questions that fall into the classic "We will *never* ask for this information" category.
- inactive, on 10/10/2007, -0/+13step #1: be wary when clicking any tinyurl link.
- philippbock, on 10/10/2007, -0/+120/10. They asked me for my credit card number before they gave me my results.
- NerdyNinja, on 10/10/2007, -3/+14Little did you know, Digg is an online scam. Guess we're not so smart after all.
- goeatsmsht, on 10/10/2007, -0/+11lol, I thought the same thing as I clicked the link.....
- neodorian, on 10/10/2007, -0/+9Relying on an image negates any other protections you have via your browser and your use of the site. The links on a site and the addresses that show up when you mouseover links are just as important as this stuff.
- josegutz, on 10/10/2007, -4/+13YOU have failed the first half of the quiz if you clicked on that link...
- Iriel, on 10/10/2007, -1/+10I got 9/10 but rather than question 9, I didn't like 4 (I think). Sure, just checking the From field on an email isn't a sure-fire way to know the email is secure, but it's a good place to start. I can't even begin to remember how many spam emails I've received from something like jennamarie@sjkrx.qr.com
- dpvu, on 10/10/2007, -0/+9I think they didn't give you the URL on some of them like the Amazon and Bank of America ones just to see if you could detect other signs. I agree the URL is of course the easiest way though and grammar shouldn't be what you look for if checking the URL is easier.
How did you pick on the ones where they didn't give you a URL for both? - z33Tec, on 10/10/2007, -5/+149/10, good thing I don't use Chase banking I guess.
- skankyBacon, on 10/10/2007, -1/+9It wasn't asking for another name for phishing. It was asking what another type of scam was, *besides* phishing.
- triblinator, on 10/10/2007, -0/+8I thought the same thing.
- revenge7, on 10/10/2007, -0/+8No punctuation. Must be a scam.
- demodawid, on 10/10/2007, -2/+910/10
- Cymrubeats, on 10/10/2007, -2/+9I got 8 out of 10, but only the two that ask for your SS#, as over here, the equivalent (national insurance number) will never and can never be asked for anyone other than a government department.
- donkz, on 10/10/2007, -0/+7I didn't even read texts and guided myself by two principles:
-Sites that directly ask you to enter confidential information without verification are phishy
-Lousy forms that may not require validation is a tell 9/10 - Vltava, on 10/10/2007, -4/+11Safety from McAfee? By definition, their software IS a virus.
- darkzealot89, on 11/13/2007, -2/+9"Safety from NORTON? By definition, their software IS a virus."
FIXED - Supernova36, on 10/10/2007, -1/+89/10, you had to see this coming?
- chimaera2005, on 10/10/2007, -0/+78/10
- litolist, on 10/10/2007, -2/+89/10 *****.
- Dunadan, on 10/10/2007, -0/+610/10.
I guess your attempt to get people to stop failed. - aceallways, on 10/10/2007, -0/+6with tiny url you can now use the preview feature
- goldfenix, on 10/10/2007, -0/+6I read through all their reasoning for why they said the sites were faked and in nearly every case I came back with different, and better (in my mind) evidence. Things like, "Why would AOL need your full social security number, rather than just the last four digits?" Or, "Why would Amazon automatically assume I am a customer, and wouldn't have the new customer registration area?" These, in my mind, are much better questions to ask yourself. Furthermore, it's completely silly that they didn't show the URLs of each site. Those tend to be dead giveaways to anybody wary of them nearly instantaneously.
In any case, it wasn't a bad test, and might be worth showing to your non-technical friends. At least that way hopefully they will be humbled into realizing what a problem phishing really is. - Afreyt, on 10/10/2007, -0/+6Yeah, the only way to pass the test is not to take it.
-
Show 51 - 100 of 231 discussions

What is Digg?
Check out the new & improved