Security Is Hard, Y’all
Summary
Ericlaw's blog analyzes a near-consent phishing scenario involving a Cloudflare feature, showing how legitimate-looking security prompts can resemble phishing. It discusses why domain trust, UI cues, and URL reputation are challenging for defenders, and offers guidance for developers and users to better verify legitimacy and report scams.