Phishing for Credit

An anonymous reader writes "Two graduate students at Indiana University conducted a phishing study to determine how readily students will give up personal information if the phishing emails appear to come from close friends. Using only publicly available information, they sent out emails to students asking them to click a link that required username/password information. Needless to say, the study has generated lots of attention on campus. The student newspaper has the story and the researchers have created a blog where the participants can vent."

Comments

shades of Randal Schwarz at Intel

[Anonymous Coward]

While teaching a course on Perl, the co-author of O'Reilly's "Learning Perl" book ran the Crack program on Intel's password files, hoping to use the info to bid on a contract. Instead, Intel turned him into the police and he spent years trying to clear his name.

One VP had the following password: Pre$ident.

just for playing Phish?

[commodoresloat]

I can't wait to see the looks on those little Eichmanns' faces when they hear this crunchy groove!