It turns out that halfway clever phishing attacks really, really work

boing
10

I use iCloud password management and I think it keys off of the url’s domain. I’m hoping this mechanism cannot be fooled. Except… Apple.

Hmmm.

Okay, I’m going to have to re-think my entire security model.

2 Likes