Why phishing works
         

<p>John Gruber has a brief note about the 'Facebook login' problem, pointing to the unfolding trainwreck at ReadWriteWeb. The core problem is that many users seem to have only a very shaky grasp of how to use the Web. Their strategy for finding, say, Facebook, is simply to type what they're looking for into Google, and then click the first result that comes up. As the ReadWriteWeb case demonstrates, once they get there they have no idea that they're not where they want to be.</p>


         

http://www.spamnation.info/blog/archives/2010/02/why-phishing-works.html