list domains?

[ExpoUrani]

I do not find list of legitimate domains alternative to the principal.

I find pages but I doubt if it is possible to be safe in them or not.

This is legitimate?


Http://knaben.org

[Moe]

The only valid domains are the ones in the footer of every page on this forum.

[ExpoUrani]

Do they steal passwords in those domains?

[Moe]

No, they ask nice and people hand them over.

[aadniz]

I don't see why it is fishy when it doesn't even run JavaScript.

[Sid]

Really?

* Sid cries

When people set out to harvest usernames and passwords, via HTML forms (which do not require javascript), they don't stick up big red notices on their sites saying:

"THIS IS NOT THE PIRATE BAY BUT PLEASE TELL US YOUR PIRATE BAY USERNAME AND PASSWORD ANYWAY SO THAT WE CAN SELL THEM TO PEOPLE WHO MAY USE THEM TO UPLOAD FAKE OR INFECTED TORRENTS IN YOUR NAME OR TO ACCESS OTHER SITES YOU MAY HAVE BEEN FOOLISH ENOUGH TO USE THE SAME CREDENTIALS FOR."

Pro tip: when one site asks you to enter the username and password you use to connect to another site THAT'S FISHY. That alone should set off alarm bells. Sometimes, it will be legit but if you don't know who is running the site doing the asking, and you don't have a good specific reason to trust them, think twice.

[ShadowHD]

Well if people are clever enough to even think to give third party site login details from another site. I guess then they should proceed to do that. For some people, after being on the internet for years there is no other way, other than burn themselves and learn on the hard way.

[Philidor]

I don't see why it is fishy when it doesn't even run JavaScript.

Try fish as in phish. It doesn't require any code, just a sucker who feels comfortable supplying any and all asked-for information. And that's as much a matter of presentation style, wording, and expectation. The web isn't a secure place. Governments would rather focus on the eee-vils of file sharing than the way huge corporations are hacked regularly for their customerbases. And that's not even including the shoddy and shady conduct of corporations who sell all your information to data miners.

Please excuse the rant.

[aadniz]

Try fish as in phish. It doesn't require any code, just a sucker who feels comfortable supplying any and all asked-for information. And that's as much a matter of presentation style, wording, and expectation. The web isn't a secure place. Governments would rather focus on the eee-vils of file sharing than the way huge corporations are hacked regularly for their customerbases. And that's not even including the shoddy and shady conduct of corporations who sell all your information to data miners.

Please excuse the rant.

Yes, there is more ways than JavaScript, but thought JavaScript could be the main fishy thing being executed.

[Philidor]

Try fish as in phish. It doesn't require any code, just a sucker who feels comfortable supplying any and all asked-for information. And that's as much a matter of presentation style, wording, and expectation. The web isn't a secure place. Governments would rather focus on the eee-vils of file sharing than the way huge corporations are hacked regularly for their customerbases. And that's not even including the shoddy and shady conduct of corporations who sell all your information to data miners.

Please excuse the rant.

Yes, there is more ways than JavaScript, but thought JavaScript could be the main fishy thing being executed.

In code, probably so. But there's one thing that's far more vulnerable to any number of exploits: human beings.