Recently, the Shmoo Group discovered that Firefox is vulnerable to precisely the exploit that i predicted in my 2002 paper—Ping

➡

How is it that Pet Names don’t solve this problem?—Mark

➡

Pet names only solve the problem as long as users are not allowed to type URLs into the location bar.—Ping

➡

Not at all. They can type any URL they like into the URL-location field. The issue is then, what is displayed in the Pet Name location field?—Mark

➡

Suppose the user sees "paypal.com" in the URL field while establishing a trust relationship with the site.—Ping

➡

If you always type the URLs of sites you want to trust, this problem does not occur.—Ben

➡

I think the only sites I have sent my credit card to are either ones I typed, or paid links from Google. Both ways of initially establishing trust are good enough for my $50 liability. (Where real money is involved, I tend to be conservative. I use the mail and the telephone.)

Cheers—Bill—Bill