[nsp-sec] Google spreadsheet phish

[David Freedman]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


This one is great:

hxxps://spreadsheets.google.com/spreadsheet/viewform?formkey=dEdYRVhlVkJoRUpZaUFsVTVueVVkaWc6MQ

Have clicked "report abuse" which is quite clearly displayed below the
content, how stupid must these people be??

Dave.


On 29/07/11 16:22, Chris Morrow wrote:
> ----------- nsp-security Confidential --------
> 
> 
> 
> On 07/29/11 11:00, Gabriel Iovino wrote:
>> ----------- nsp-security Confidential --------
>>
>> On 7/29/2011 10:36 AM, Chris Morrow wrote:
>>> I forgot in my last note to say: "Clicking the report abuse" link at the
>>> bottom of the spreadsheet should now be making these get flagged
>>> automatically then removed.
>>
>> If I could get you to give a guesstimate on the turn around time of
>> someone or multiple people reporting abuse, what do you think that would be?
>>
>> 1, 4, 12, 24 hours?
>>
> 
> no idea, I'd bet ~24hrs would be the best guess. I think the process
> internally looks like: "user clicks button, someone gets a note that
> 'hey this should be looked at' and they shutdown what looks 'bad'"
> 
> I don't know the guts of the system though :(
> 
> -chris
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________
> 


- -- 

David Freedman
Group Network Engineering

david.freedman at uk.clara.net
Tel +44 (0) 20 7685 8000

Claranet Group
21 Southampton Row
London - WC1B 5HA - UK
http://www.claranet.com

Company Registration: 3152737 - Place of registration: England

All the information contained within this electronic message from
Claranet Ltd is covered by the disclaimer at
http://www.claranet.co.uk/disclaimer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk431vMACgkQtFWeqpgEZrLW1gCfdhNx8bUfFE2IeL0yxT1Q65S5
VB8An3aUwz4fN6UJRYM7qCmesftQzDf+
=iyW6
-----END PGP SIGNATURE-----