Recent searches
Search options
"The dots do matter: how to scam a Gmail user": https://jameshfisher.com/2018/04/07/the-dots-do-matter-how-to-scam-a-gmail-user
jameshfisher.comThe dots do matter: how to scam a Gmail userI recently received an email from Netflix which nearly caused caused me to add my card details to someone else’s Netflix account. Here I show that this is a new kind of phishing scam which is enabled by an obscure feature of Gmail called “the dots don’t matter”. I then argue that the dots do matter, and that this Gmail feature is in fact a misfeature. Finally I’ll suggest some ways the Gmail team can combat such scams in future. But first, I’ll show you the email:
@tek eh, I don't know about this solution. I think this is why they say to never click on a link in an email. Better to login from a bookmark and check it that way. Eve could have just as easily forged the email with the fully correct addr. Also if Netflix really doesn't check the addr, Eve could very well have just made a typo.
@sowth I’m not sure about the solution, but I thought the problem was interesting. Honestly, that hadn’t occurred to me.