Quote:
Originally Posted by bluecar1
the much talked about anti-phishing in webwise is about to take another one on the chin, due to the delays getting the trial out the natural course of upgrades has seen the Beta 2 of IE8 coming out
see http://www.theregister.co.uk/2008/07..._enhancements/
to quote
***********
Microsoft has detailed a raft of security improvements due to appear in Internet Explorer 8. The second beta of Redmond's web browser will be packed full of features designed to thwart phishing and drive-by download attacks, Redmond explained on Wednesday.
***************
so what use will webwise anti phishing be now with this and FF3 out????
come on phorm give up the pretense that the anti phishing will be of use, fess up it is just a smoke screen to hook gullible punters who do not know what their system are already capable of, who you have not given the full facts to, to opt-in to your spyware
peter |
We all know that the anti-phishing' part of webwise is a complete red herring and seen as a bolt-on to sell the technology to the unsuspecting public. Here's the proof that it is a red herring and smoke screen...
PECR states certain provisions relating to the processing of traffic data under regulation 7:-
Regulation 8 (2) Processing of traffic data in accordance with regulation 7 shall be restricted to what is required for the purposes of one or more of the activities listed in paragraph (3) and shall be carried out only by the public communications provider or by a person acting under his authority.
(3) The activities referred to in paragraph (2) are activities relating to -
(a) the management of billing or traffic;
(b) customer enquiries;
(c) the prevention or detection of fraud;
(d) the marketing of electronic communications services; or
(e) the provision of a value added service.
A,B,C,and D don't apply to webwise, so you see, some form of 'value added service' had to be stuck on to 'attempt' to comply with PECR
That is why the 'anti-phishing' is being pushed so much.
But even so, webwise 'still' falls foul of the regulations because it still does not collect explicit informed consent.
PECR explanatory notes...
Regulation 6 provides that an electronic communications network may not be used to store or gain access to information in the terminal equipment of a subscriber or user ("user" is defined as "any individual using a public electronic communications service") unless the subscriber or user is provided with certain information and is given the opportunity to refuse the storage of or access to the information in his terminal equipment.
Regulations 7 and 8 set out certain restrictions on the processing of traffic data relating to a subscriber or user by a public communications provider. "Traffic data" is defined as "any data processed for the purpose of the conveyance of a communication on an electronic communications network or for the billing in respect of that communication". "Public communications provider" is defined as "a provider of a public electronic communications network or a public electronic communications service".