Why Phishing Works

[brotherS]

http://it.slashdot.org/article.pl?sid=06/03/30/1556226&from=rss

When asked if a phishing site was legit or a spoof, 23% of users use only the content of the website to make the decision! The majority of users ignore the address and SSL indicators in the browser. Some users think that favicons and lock icons in HTML are more important indicators.

Oh my... 

[allen]

People need to learn that there's no amount of software that can protect you -- icons, alerts, widgets in browsers try -- but at the end of the day, the only thing standing between you and "Oh shit" are a few little things I like to call "awareness", "reasoning" and "scrutiny".

[brotherS]

Well said - many folks would have been dead a long time already if they'd be as 'careful' on the streets...