[Bloody Sam Roberts]

The user who discovered the problem was sent a link to a fake Myspace page that requested his login details.

Why do people still insist on clicking on links sent to them via email?

Isn't this Rule #1 for keeping your various login details secret?

This Firefox bug may be a problem but no software can protect the user from his/her own stupidity.

[Phsstpok]

The user who discovered the problem was sent a link to a fake Myspace page that requested his login details.

Why do people still insist on clicking on links sent to them via email?

Isn't this Rule #1 for keeping your various login details secret?

This Firefox bug may be a problem but no software can protect the user from his/her own stupidity.

I haven't checked out the bug yet, but I suspect that Microsoft either has a hand in discovering/promoting this problem or will exploit it as a promotion for IE7 and its built in phishing filter.

As to your comment, at work I call the "click on this link" or "run this program" type of attacks "darwinian."  If you're stupid enough to fall for the attack then you're not bright enough to be using a computer on my corporate network, bye-bye, your port is now deactivated.