Phishing to Facebook users

Wikipedia states:

In computing, phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details, by masquerading as a trustworthy entity in an electronic communication (read the full article).

ESET Latinoamérica has reported fake invitations to Facebook; when you click on the links in the invitation mail, you get a page that looks identically to the Facebook website, but is coming from another source, and expects to get your credentials to gain access to your Facebook account and profile. This would compromise the personal and private information stored in the profile of the user being attacked.

We are used to know about these phishing attempts with banking websites, eBay, Paypal, etc. but I think this is the first report of a phishing massive attack to social network users.

The solution to avoid this attacks is to keep eyes wide open: Always look at the address bar of your browser, and identify if the shown URL really corresponds to the website you are supposedly visiting. Also you could use web browsers with anti-phishing methods, like Firefox 3.

Override inline styles (this is not for you, IE fans)

Natalie Jost wrote a very interesting article about how to override inline styles from the CSS style sheet.

Why would you need something like this?

Well, let’s say you are working with some old CMS with poor render techniques that insist on create and style HTML “on the fly”, without template flexibility (Yes, I have found a lot of these being used with my clients)… Or a worst case: You have to publish documents that were exported to HTML from a crappy desktop word processor (Some companies have this kind of procedures to publish press statements, financial reports and other documents).

So, here’s the magic sentence:


/* override inline styles */
span[style^=""]{
    color: inherit !important;
    font-size: inherit !important;
}

But please, go to Natalie’s blog and read the explanation.

I really hope you don’t need this, but it is good to have these tools handy, just in case.

Yay! It’s a naked blog!

If you are not reading this blog on an RSS aggregator, you’ll notice the graphic layout has gone.

That’s because this year, April 9 is CSS Naked Day, when a lot of websites around the world just strip their clothes styles and show of their markup au naturel, with the objective of vindicate XHTML as a markup language and not a graphical design platform.

So, being a defender of web standards, XHTML+CSS and all that, I decided to join the party and show off my naked <body>. And well… I just noticed my templates need some workout.