<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>A Fool's Wisdom &#187; Human Error</title>
	<atom:link href="http://foolswisdom.com/tag/human-error/feed/" rel="self" type="application/rss+xml" />
	<link>http://foolswisdom.com</link>
	<description>A fool and his blog are soon parted.</description>
	<lastBuildDate>Mon, 12 Dec 2011 22:39:23 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3</generator>
		<item>
		<title>2luo.com YouTube Phishing? I Hope Not</title>
		<link>http://foolswisdom.com/2luocom-youtube-phishing-i-hope-not/</link>
		<comments>http://foolswisdom.com/2luocom-youtube-phishing-i-hope-not/#comments</comments>
		<pubDate>Sat, 19 Jan 2008 01:01:31 +0000</pubDate>
		<dc:creator>Lloyd</dc:creator>
				<category><![CDATA[Web]]></category>
		<category><![CDATA[2luo.com]]></category>
		<category><![CDATA[Distraction]]></category>
		<category><![CDATA[Firefox]]></category>
		<category><![CDATA[Google]]></category>
		<category><![CDATA[Google Web Search]]></category>
		<category><![CDATA[Human Error]]></category>
		<category><![CDATA[Human Reliability]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[passwords]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[PhishTank]]></category>
		<category><![CDATA[Resilience]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[Vigilance]]></category>
		<category><![CDATA[YouTube]]></category>

		<guid isPermaLink="false">http://foolswisdom.com/?p=663</guid>
		<description><![CDATA[I just noticed that I tried to login with my YouTube account information at www.2luo.com . I hope it isn&#8217;t a phishing or other form of malicious site, but to be safe I changed my password there and on sites &#8230; <a href="http://foolswisdom.com/2luocom-youtube-phishing-i-hope-not/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>I just noticed that I tried to login with my YouTube account information at www.2luo.com . I hope it isn&#8217;t a <a href="http://en.wikipedia.org/wiki/Phishing">phishing</a> or other form of malicious site, but to be safe I changed my password there and on sites where I used a related pattern.</p>
<p><span id="more-663"></span>Sorting back through my tabs, I discovered how I ended up on 2luo.com . I had done a <a href="http://www.google.com/search?q=youtube+floyd+wall+remix">Google search for &#8220;youtube floyd wall remix&#8221;</a></p>
<p><a href="http://www.flickr.com/photos/lloyds-screenies/2202091183/" title="2luo.com in Google Search Results for YouTube by lloydsscreenies, on Flickr"><img src="http://farm3.static.flickr.com/2323/2202091183_21a4764e9c_m.jpg" width="240" height="240" alt="2luo.com in Google Search Results for YouTube" /></a></p>
<p>Visiting the result which I have underlined in red, I&#8217;m now at a site that looks like YouTube and behaves like YouTube in every way, except the URL isn&#8217;t YouTube. I have reason to worry about anything I submit to the site.</p>
<p>I can hope that it is a harmless reverse proxy, but the whois for that site isn&#8217;t reassuring:</p>
<blockquote><p>
   kdkkdk<br />
   lg ggg (lgvcd@hotmail.com)<br />
   +1.90383920<br />
   Fax: +1.90383900<br />
   kdkk<br />
   dkdkkkk, DJ 47738<br />
   US
</p></blockquote>
<p>For some reason, I don&#8217;t think that they are really in the USA.</p>
<p>I checked at <a href="http://www.phishtank.com/">PhishTank</a> and this site hasn&#8217;t been reported yet. </p>
<p>I don&#8217;t really know how to further investigate, so I will take my fresh minted passwords and get back to other things.</p>
<h3>How did it come about that I made this mistake?</h3>
<p>I was absent minded and admit to relying on <a href="http://www.google.com/support/bin/answer.py?answer=45449&#038;query=malicious&#038;topic=&#038;type=">Google</a> and <a href="http://www.mozilla.com/en-US/firefox/phishing-protection/">Firefox&#8217;s</a> anti-phishing protection. YouTube is a Google property, so there is some irony.</p>
<p>How much was human error?</p>
<blockquote><p>Recently, human error has been reconceptualized as resiliency to emphasize the positive aspects that humans bring to the operation of technical systems (see Hollnagel, Woods and Leveson, 2006)</p></blockquote>
<blockquote><p>Within the broad domain of industrial safety, the term resilience has come into use to emphasise that safety must be proactive as well as reactive.</p></blockquote>
<p>So, I take ownership for the mistake, and for quickly minimizing the damage of the mistake. My error was distraction. Like everyone else, I&#8217;m not particularly good at staying vigilant. That is why as well as reasonable personal responsibility and consideration of habits, we need better tools.</p>
]]></content:encoded>
			<wfw:commentRss>http://foolswisdom.com/2luocom-youtube-phishing-i-hope-not/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
	</channel>
</rss>

