or Connect
AppleInsider › Forums › Software › Mac OS X › Anti-phishing measures already turning up in Safari 3 builds
New Posts  All Forums:Forum Nav:

Anti-phishing measures already turning up in Safari 3 builds

post #1 of 31
Thread Starter 
Security enhancements that will protect users of Apple Computer's forthcoming Safari 3.0 Web browser from malicious websites have already begun to appear in the latest builds of the company's next-generation Leopard operating system.

According to published reports, the "anti-phishing" features, first described by AppleInsider last week, are accessible to developers testing the latest pre-release distribution of Leopard, build 9A283.

Through interaction with Google's AntiTrust database, Safari 3.0 is able to automatically detecting "phishy" or deceitful website URLs. It then notifies the user via a dialog box, webpage overlay, or a combination of the two.

"This webpage is fraudulent. You should close it immediately," reads a dialog box that pops up in pre-release builds of the browser. "Google has identified this webpage as fraudulent. Do not enter any personal information on this page."

Also new to Leopard in build 9A283 are significant user interface changes to iCal, 3D audio cues in VoiceOver, live*previews*in*print*panels, basic document editing in Preview.app, and the ability to restore groups and subgroups in AddressBook with Time Machine.

Additionally, Apple said Spotlight search technology in the latest builds includes support for *PDF,*HTML,*Web*Archives,*Text, QuickTime movies*and*sound in "Quick Look" view. Time*Machine*snapshots*are*searchable*through*Spot light, the company told developers.

Safari 3.0 anti-phishing measures | Photo credit: TUAW

Meanwhile, iChat in Leopard now allows Spotlight Previews to be streamed in iChat Theater mode and gives users the ability to replace background video effects.
post #2 of 31
Cool*beans*love*the*rumors.
My brain is hung like a HORSE!
Reply
My brain is hung like a HORSE!
Reply
post #3 of 31
*notice the integration with google*

i like...
"i find that if you keep talkin', your mouth comes up with stuff..." Karl Pilkington
Reply
"i find that if you keep talkin', your mouth comes up with stuff..." Karl Pilkington
Reply
post #4 of 31
A ridiculous amount of work went into Safari since 10.4. The upgrades to Safari in 10.4 point updates have absolutely nothing to do with what's going on behind the scenes with Webkit or even the upcoming Safari 3.0.

In a way, I wish all (or most of) the Webkit changes will make it into the last update to Safari 2.x.

Safari 3.0 will be a pleasant browser if only because it'll incorporate all the Webkit changes to date...but the anti-phishing feature will be great for unsuspecting users and the new search feature looks great.
post #5 of 31
Quote:
Originally Posted by mbaynham

*notice the integration with google*

I don't know what kind of contract Apple has with Mapquest but I hope Address Book kicks Mapquest out and makes room for maps.google.
post #6 of 31
Quote:
Originally Posted by AppleInsider

Meanwhile, iChat in Leopard now allows Spotlight Previews to be streamed in iChat Theater mode

Why? What the hell is the point of showing someone my spotlight search?
Quote:
Originally Posted by appleinsider vBulletin Message

You have been banned for the following reason:
Three personal attacks in one post. Congratulations.
Date the ban will be lifted:...
Reply
Quote:
Originally Posted by appleinsider vBulletin Message

You have been banned for the following reason:
Three personal attacks in one post. Congratulations.
Date the ban will be lifted:...
Reply
post #7 of 31
Quote:
Originally Posted by mbaynham

*notice the integration with google*

i like...

It has never really been Apple's style to do that so it wouldn't surprise me if they changed it to "Apple has identified..."
post #8 of 31
i wish they'd improve the multithreading in safari.
post #9 of 31
Quote:
Originally Posted by Feynman

It has never really been Apple's style to do that so it wouldn't surprise me if they changed it to "Apple has identified..."

OTOH, Google has a pretty good reputation *outside* the Mac community, so it would likely make the general populace comfortable with it as well. ie, switchers.
My brain is hung like a HORSE!
Reply
My brain is hung like a HORSE!
Reply
post #10 of 31
In other news:

Microsoft sucks!

IE 7 has flaws!

http://secunia.com/advisories/22477/
post #11 of 31
Is Inquisitor part of Safari 3 now? Or is that just the dude's safari who took the screenshot?
post #12 of 31
Man I would come back to Safari if only they would have a extension system like FireFox. I just love too much to customize FireFox to my liking. I have the Safari theme installed on it though so I forget it is some windows open source non Apple App.
FF 2.0 RC3 is just too nice.
post #13 of 31
It would be nice if this wasn't integrated into the browser but was a part of the operating system itself to stop other programs accessing those URLs (e.g. spyware). This would make OS X even more secure.
post #14 of 31
I suspect it's in WebKit, in which case, it *will* be in most apps... assuming they use WebKit, which most that need web support do.
My brain is hung like a HORSE!
Reply
My brain is hung like a HORSE!
Reply
post #15 of 31
Quote:
Originally Posted by Feynman

It has never really been Apple's style to do that so it wouldn't surprise me if they changed it to "Apple has identified..."

Or they can pass the lawsuits on to Google.
What goes online stays online. What is online will become public.
Reply
What goes online stays online. What is online will become public.
Reply
post #16 of 31
I find it ironic that the pic shows Safari logging into eBay-- seeing as how eBay is the reason that my Dad stopped using Safari; Safari's back button does not load search ebay results correctly because it always starts at the top of the page so you lose your place.
post #17 of 31
Teach your Dad to use tabs?
post #18 of 31
Quote:
Originally Posted by kim kap sol

I don't know what kind of contract Apple has with Mapquest but I hope Address Book kicks Mapquest out and makes room for maps.google.

You can already ignore Mapquest by using Brian Toth's Google Maps Plugin for Address Book instead.
post #19 of 31
Quote:
Originally Posted by sjk

You can already ignore Mapquest by using Brian Toth's Google Maps Plugin for Address Book instead.

Anyone else wonder where this came from? (look to the left where you see the Notes in yellow and a picture of a map). Is that Apple's very own integration of mapping or a supped up Google Maps?
post #20 of 31
Could be a dropped image... in fact, given that it is a map of a campground, that's my bet.
My brain is hung like a HORSE!
Reply
My brain is hung like a HORSE!
Reply
post #21 of 31
Quote:
Originally Posted by Kickaha

Could be a dropped image... in fact, given that it is a map of a campground, that's my bet.

Sure it could be but notice how it just blends in with the default yellow background? No mapping service I know of offers offers that kind of transparency and I don't think it was a CoreImage effect either. Their screenshots for Mac OS X are suppose to appeal to the average user not an Illustrator guru who knows how to make a detailed map for a camping trip...
post #22 of 31
It would be bad if they overloaded Preview with features. Its fast load time is one of its primary benefits.
post #23 of 31
Woohoo! Anti-phishing tools! Too bad all they do is check a list of bad sites, which, usually, are taken down once they're found out, anyway. Basically, it won't stop people if the site isn't on the 'bad' list yet.
post #24 of 31
Quote:
Originally Posted by Louzer

Woohoo! Anti-phishing tools! Too bad all they do is check a list of bad sites, which, usually, are taken down once they're found out, anyway. Basically, it won't stop people if the site isn't on the 'bad' list yet.


Are you sure? What if they also combined the 'bad' list with a list of known good sites for different companies/websites. I.e. If the site has EBay in it and a sign in and password field, if the url is not http://*.ebay.com flag as possible fraud.

I'm sure they would have no problem getting companies to submit information to the list especially for a company as big and reputable as Google.
post #25 of 31
Quote:
Originally Posted by rebel_without_a_pc

I find it ironic that the pic shows Safari logging into eBay-- seeing as how eBay is the reason that my Dad stopped using Safari; Safari's back button does not load search ebay results correctly because it always starts at the top of the page so you lose your place.

Works fine for me. And I use it a lot. I assume you're talking about when you search, scroll down to some spot and click on an item then later "back" up to that page? You just have to wait until the page loads completely (the address bar gets unhighlighted) and it will go to the spot you were on before.
post #26 of 31
What I'm concerned about is false hits. What about sites that are okay and get placed on the list? How do you go about getting "off" the list so people will visit your site again? And if it becomes common to get these kind of messages on sites where there isn't really a danger, than people will get desensitized to the messages. Kind of like the security warnings or the "unsigned drivers" warnings in Windows- nobody actually reads them, they just hit "Okay" automatically when something like that pops up.

I think part of the solution can be that, rather than the kind of message in the screenshot, Safari can just not Autofill the forms on the page and give a message to the effect "Safari did not Autofill the forms because.... etc." and give a confirmation message if the user manually enters some info and hits "Enter".
post #27 of 31
wow just downloaded inquisitor...this is cool!!!!!! like the black search results pain...mmmmm black gui in leopard me thinks.

http://www.apple.com/downloads/macos...nquisitor.html
post #28 of 31
Did the anti-phishing feature get dropped in the release Leopard?
post #29 of 31
Apparently it was dropped from Leopard.

I thought it was a neat idea but it had privacy concerns. Does one really want to send each and every URL they click on to Google?
post #30 of 31
Quote:
Originally Posted by Dave K. View Post

Apparently it was dropped from Leopard.

I thought it was a neat idea but it had privacy concerns. Does one really want to send each and every URL they click on to Google?

That didn't stop firefox. The other option was to use a downloaded blacklist that updates twice an hour or something. Besides though, according to the privacy policy, Google doesn't store any info about where the URL came from.
post #31 of 31
Quote:
Originally Posted by icfireball View Post

That didn't stop firefox. The other option was to use a downloaded blacklist that updates twice an hour or something. Besides though, according to the privacy policy, Google doesn't store any info about where the URL came from.

And Telcos don't sell your private contact information even after Congress adds you to a no-call list.

Get used to be backhanded by companies, especially a company like Google whose sole business model centers around information.
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Mac OS X
AppleInsider › Forums › Software › Mac OS X › Anti-phishing measures already turning up in Safari 3 builds