There are no limits to human stupidity.

[Florian Weimer]

* Perry E. Metzger:

> The following message is, sadly, real. The URLs have been altered a
> bit to conceal some personal information of the bank customer. (The
> HTML version, naturally, just provides click throughs instead of
> saying "copy and paste this into your browser".)
>
> I would comment on it, but really, what more can I say?

>From a previous Chase mailing ("Introducing Chase Identity
Protection").

| If you have any concerns about phishing, cut and paste this link
| into your browser instead: www.chaseidentityprotection.com enter
| offer code xxxxx.

Needless to say, the mass-mailing was not sent from Chase's own
infrastructure, but by a contractor.  I've heard that they even use
fuzzy matching to recover your email address from your postal address.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com