SSL Is Not a Badge of Total Security

How is this news? This entire post is blogspam referencing a 2014 Blackhat presentation about a cheap social engineering trick that has nothing to do with SSL.

https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflecte...

Ironically, this article is on a site that has a mixed-content warning (i.e., there are both HTTPS and normal HTTP assets on the page).

This is complete drivel.

i saw a banner ad for "grams", made to look like the old google logo

it's on "deepdotweb.com" so i assume it's for some illegal drug site

really put me off of using that site