Fair Use: Please note that use of the Netcraft Blog is subject to our Fair Use and Copyright policies. For more information, please visit http://news.netcraft.com/fair-use-copyright, or email info@netcraft.com.

  1. www.sco.com Back Online

    The www.sco.com web site was brought back online by The SCO Group over the weekend after an extended hiatus following the MyDoom-related distributed denial of service (DDoS) attack on the site. The relaunched site experienced a brief outage last night, but otherwise has been available.

    www.sco.com back online

    A dynamically upgrading graph is available here.

    (more...)

    Posted by Rich Miller on 8th March, 2004 in Performance Share

  2. SSL’s Credibility as Phishing Defense Is Tested

    Internet "phishing" scams are incorporating the use of SSL certificates - both real and faked - in their efforts to trick users into divulging sensitive login information for financial accounts.

    This trend bears watching, as the presence of an SSL certficate was intially touted by consumer protection groups as a way to differentiate between scams and legitimate sites. The U.S. Federal Trade Commission, for example, offered this advice to consumers concerned about phishing: "Before submitting financial information through a Web site, look for the "lock" icon on the browser's status bar. It signals that your information is secure during transmission."

    But security professionals are focused on the limitations of SSL in the wake of a recent scam targeting Earthlink users (mentioned near the bottom of this story) which employed an SSL certificate so the bogus page displayed the lock icon. In this case, the certificate appeared legit because it matched the URL of the fake page mimicking the Earthlink web site, but had no connection to Earthlink. Visitors would only detect the deception if they reviewed the certificate.

    (more...)

    Posted by Rich Miller on 8th March, 2004 in Security Share