by mikeo on Sat Aug 16, 2008 6:02 pm
I get them every day, Mostly I ignore them, but sometimes I fill in all the details, yes with spoof data. Its easy to generate Visa cards numbers that will at first seem to be genuine and invent names and addresses to go with them. It then bu+++s up the phishers and wasts their time.
I did find one phishing site that had a very poor design and was able to exploit a buffer overflow, they were outside the EEC.
I often send my site warning notice that the site allows entry only on MY Conditions and these allow excessive, vicious strike back!
Sometimes I have had a grovelling apology from the site supervisor.
BTW I have been into computing since 1961, IBM STRETCH using fortran-2.
I worked for years for the UK Government. AWE, MOD(Navy), etc.
I am now retired and do a bit of data recovery. I used to use my tower data recovery system and stick the target HDD in the second caddy, but from HongKong on eBay I bought for just over a tenner including shipping a truely excellent device. Its a small USB card with a power supply. It has an IDE (Desktop), Laptop and a SATA interface, so any old dual boot (Linux/WinXP) PC or laptop can be used to break in and recover data.
From my experience, IT security is very difficult if anyone can get physical access, but data recovery is often a trivial task with free software. I personally wouldn't keep any confidential information on a PC (or Mac, though I have never hacked or even run a Mac!)I don't do on line banking and for paypal I use a special bank account. Every day I get exposure to eCrime.
If I reported it I would gum up the works. Typically I get 70 to 100 emails each day plus 60 to 80 spam, of which 10 to 15 are eCrime. I am a moderator on several groups.