I should clarify this: "All an attacker (phisher) has to do is pretend they have a legitimate intent, just like you." Ambiguous parsing. Read as: "All an attacker (phisher) has to do is pretend they, just like you, have a legitimate intent." -Shade