Don't be a Phish

I admit that I'm partial to the music of Phish, but I don't appreciate the constant stream of web-based IQ tests that are finding their way to my inbox.

A few days ago, I shared a phishing attempt that represented itself to be from Google. Would you have fallen prey? Why my G-mail account failed to recognize it, I'm still wondering... But surely, more elaborate phishing attempts can be anticipated.

How about a follow-up test?
One of the two websites below is authentic, the other is a phishing attempt disguised to trick users into giving away their login details. Can you tell which is which? What additional information do you need in order to decide?




Would you like a hint or two?
This is a copy of the original email that linked to both the real Paypal site, and the phishing site. DO NOT ENTER ANY INFORMATION INTO THE FIELDS OF THE PHISHING SITE.

With luck, your browser may caution you prior to displaying the dishonest site; and in most cases, close inspection of the web address should confirm that you are not at an authentic site. Note that it is possible for a site manager to cloak the real address and to display a false but authentic-looking domain name.

This mimicry, is the same type of work that fooled many in the Twitter community, to share their login details during last month's phishing expedition. Though that episode appears to have been horseplay, the consequences of falling for such a ploy can be grand. It's just one more reason to follow practical password advice.

If you're looking to teach others about 'phishing', I highly recommend the clever creative work of Common Craft. Regardless of your audience, Phishing Scams in Plain English is a great little tutorial.

The Lord of the Flies: The Real-life Internet Version

If the survey results released today from 3000 tweens are valid, we have much to be concerned about. This morning's London Free Press article highlights the fact that 95% of grade 6, 7 and 8 students surveyed, believe they know more about the Internet than their parents.

Whether or not the students have accurately gauged their parents web savvy-ness, the belief that they are much more knowledgeable than adults, leads young people to believe erringly, that they know the world of the Web as well as anyone. While that might be true for a few limited technologies (instant chat, social networking, managing music and media files), the teachers and parents in their lives should have at least a basic understanding of the importance of maintaining personal privacy.

Scary summation #1
"Early results indicated more than half of kids surveyed admitted giving personal information to a stranger online, including their full name, address or phone number."

Scary summation #2 should cause parents to rethink where computers are located in their homes:
"One-third admitted getting up in the night to use the Internet, most without their parents knowing."

Certainly there are a great number of safe and productive ways the Web is being used by young people. But with the students being the ones using the tools, and playing by their own rules - much like the boys in the Lord of the Flies - there is the very great possibility, that things will go wrong. Students can act unsafely, without knowing they are doing so, and they are unlikely to admit to adults, the need for assistance in dealing with the problems they encounter.

It's time for a wake-up call for parents and teachers alike: We need to be proactive in learning about, using, and teaching about the tools of the evolving web. Only when we can demonstrate our competence to young people, will our guiding words about 'Internet Island' be received as valid.

For more: Tune in to today's Teacher 2.0 podcast.