this post was submitted on 17 Nov 2023
8 points (78.6% liked)

Australia

3605 readers
60 users here now

A place to discuss Australia and important Australian issues.

Before you post:

If you're posting anything related to:

If you're posting Australian News (not opinion or discussion pieces) post it to Australian News

Rules

This community is run under the rules of aussie.zone. In addition to those rules:

Banner Photo

Congratulations to @[email protected] who had the most upvoted submission to our banner photo competition

Recommended and Related Communities

Be sure to check out and subscribe to our related communities on aussie.zone:

Plus other communities for sport and major cities.

https://aussie.zone/communities

Moderation

Since Kbin doesn't show Lemmy Moderators, I'll list them here. Also note that Kbin does not distinguish moderator comments.

Additionally, we have our instance admins: @[email protected] and @[email protected]

founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 9 points 1 year ago* (last edited 1 year ago) (3 children)

The key thing missing is the URL and I would presume the hacker page wouldn't have a ๐Ÿ”’ both things I would be looking at

[โ€“] [email protected] 10 points 1 year ago

These are actually for fake banking apps - not the websites, it's probably more of a concern with Android because of side-loading and how loose the play store is. Also the lock symbol is really easy to get - SSL/TLS is free (Let's Encrypt) and doesn't mean that the website is legit, it just means that what you're seeing is actually www.veryrealcommonwealthbankpage.xyz, not the official Commonwealth Bank site and that all communication cannot be intercepted by a third party

[โ€“] [email protected] 9 points 1 year ago (2 children)

Not only that 'missing the option to hide your password' wtf. That's the opposite of the eye icon.

Absolute panic bait. 'Can you determine the legitimacy of these login pages for banks you don't use based on incomplete data?? THEN YOU'RE IN DANGER!!!"

[โ€“] [email protected] 3 points 1 year ago (1 children)

I stopped right there too. They have it arse about.

[โ€“] [email protected] -1 points 1 year ago

Wow did you not read the article? This isn't about a website login, it's about fake hijacked login screens on apps which last I checked, don't have URLs shown.

[โ€“] [email protected] 2 points 1 year ago* (last edited 1 year ago)

Agreed and I thought the exact same thing, although the website URL and possibly even the SSL certificate details still needs to be checked even with the ๐Ÿ”.