Slashdot Mirror
Watered Down Phishing Protection In IPhone OS 3.1?
CrazyCanucklehead writes "Security Researcher Michael Sutton discusses his findings when looking at the advertised anti-phishing features in the recently released iPhone OS 3.1. It turns out that the protection is far less than what is provided in OS X and the feature may not provide any protection at all."
It's spelled oversight.
Yah, cause after all my BlackBerry Curve had anti-phishing... wait no it didn't... and that windows mobile phone work gave me had... wait no it didn't... granted both had such awful browsers I don't think many people even used them. Either way it's really popular to rag on Apple for things not being entirely perfect. Fact is I'm more excited about the loads of other things that came with 3.0 and less worried about perhaps a less than great anti-phishing black list. Besides I think you've gotta be pretty stupid to get caught by a phishing attack.
It's not frickin' rocket science.
Instead of putting all this effort into anti-phishing technology, we should make people less stupid.
The problem is that the API for "people" is really old, and many of the functions appear to be deprecated (see driving a non-syncromesh manual transmission, hunting, fabricating arrow points, etc). It's much easier to foam rubber coat the world, than to try to make "people" smarter (See modern playgrounds for freshly instantiated "people").
Sheldon
He went to the popular testing site Phishtank and tried the phone out against a bunch of different phishing attempts. He says not one was blocked.