One Piece at a Time

Sometimes, it's enough to solve one piece of the problem rather than waiting for the magicbullet that will make the problem disappear. Protecting your users against phishing attemptscan be tough, since the design of pages (and facilities of browsers) can make it difficult toknow which page you're actually viewing. I like a little IE add-in called SpoofStick thatthe folks at CoreStreet have developed and released for free download. It adds a small bar thatshows where the web page is coming from--an interesting bit of information to compare withwhere you think you're browsing. Their page gives an an example of how it works, it carriesno spyware, and the price is right.