A billion keys, but few locks: the crisis of web single sign-on
Do security toolbars actually prevent phishing attacks?