Comments on: French managers comment on PhishTank http://www.phishtank.com/blog/2007/02/09/french-managers-comment-on-phishtank/ A blog about and from PhishTank, a collaborative clearinghouse for data about phishing. Tue, 07 Oct 2008 11:44:17 +0000 http://wordpress.org/?v=2.0.4 by: Ilgaz http://www.phishtank.com/blog/2007/02/09/french-managers-comment-on-phishtank/#comment-5635 Mon, 12 Feb 2007 12:57:03 +0000 http://www.phishtank.com/blog/2007/02/09/french-managers-comment-on-phishtank/#comment-5635 System is nearing "realtime comparable" levels based on some of my submissions. If an URL arrived 10 secs ago to a mailbox is already submitted/voted/verified by Phishtank users, that is some amazing success. I have seen that more than couple of times now. Phishtank and this community made a $50.000 (lets not name) security service look like a toy and joke, that is some success which should be taken very serious. These are the same people who are alerting Mac userbase about "theoretical" proof of concepts for years to sell their products. I am telling these since there could be a major propaganda against Phishtank by very same people who aren't happy to lose their $50.000/year customers. About the educational role? As site is open to visitors, if you notice someone around you hasn't got a single clue about what "Phishing" is, show him/her this site , live examples. When he/she sees a major financial organisation is targeted on 100-200 live web sites with fake addressbars, he/she will take it serious. System is nearing “realtime comparable” levels based on some of my submissions.

If an URL arrived 10 secs ago to a mailbox is already submitted/voted/verified by Phishtank users, that is some amazing success. I have seen that more than couple of times now.

Phishtank and this community made a $50.000 (lets not name) security service look like a toy and joke, that is some success which should be taken very serious. These are the same people who are alerting Mac userbase about “theoretical” proof of concepts for years to sell their products. I am telling these since there could be a major propaganda against Phishtank by very same people who aren’t happy to lose their $50.000/year customers.

About the educational role? As site is open to visitors, if you notice someone around you hasn’t got a single clue about what “Phishing” is, show him/her this site , live examples. When he/she sees a major financial organisation is targeted on 100-200 live web sites with fake addressbars, he/she will take it serious.

]]> by: alanjshea http://www.phishtank.com/blog/2007/02/09/french-managers-comment-on-phishtank/#comment-5531 Mon, 12 Feb 2007 02:02:01 +0000 http://www.phishtank.com/blog/2007/02/09/french-managers-comment-on-phishtank/#comment-5531 Stéphane DEGOR's summary of the manager's thoughts on PhishTank: "pour être efficace dans la lutte contre le phishing, le système doit être très réactif, très diffusé, avoir un rôle plus éducatif et ne pas devenir payant dans les prochaines années." "To be effective in the fight against phishing, the system must react quickly, be widely used, have an educational role, and not become commercial in the next few years." I definitely concur with the educational role idea. There's a lot that PhishTank should be doing to illustrate and teach the art of detecting phishing (for instance, a filter on the Phish Archive to show valid phishes with valid screenshots so that newbies can learn from the experts). In addition, there are a number of "how to vote" explanations in the Blog that should be collected on an explanatory page for new phishing members and reference by the existing experts. Stéphane DEGOR’s summary of the manager’s thoughts on PhishTank:

“pour être efficace dans la lutte contre le phishing, le système doit être très réactif, très diffusé, avoir un rôle plus éducatif et ne pas devenir payant dans les prochaines années.”

“To be effective in the fight against phishing, the system must react quickly, be widely used, have an educational role, and not become commercial in the next few years.”

I definitely concur with the educational role idea. There’s a lot that PhishTank should be doing to illustrate and teach the art of detecting phishing (for instance, a filter on the Phish Archive to show valid phishes with valid screenshots so that newbies can learn from the experts).

In addition, there are a number of “how to vote” explanations in the Blog that should be collected on an explanatory page for new phishing members and reference by the existing experts.

]]> by: funchords http://www.phishtank.com/blog/2007/02/09/french-managers-comment-on-phishtank/#comment-5050 Fri, 09 Feb 2007 21:49:29 +0000 http://www.phishtank.com/blog/2007/02/09/french-managers-comment-on-phishtank/#comment-5050 "There is no simple declaration of victory, of course. We build tools ...make sure the data is freely available ... And we keep improving." Nicely put, John! Quality is a journey, not a destination. “There is no simple declaration of victory, of course. We build tools …make sure the data is freely available … And we keep improving.”

Nicely put, John!

Quality is a journey, not a destination.

]]>