[stonemetal]

What about man in the middle?(Go to yahoo get your image and display it for you.) Heck even pass your credentials through to yahoo to verify that you gave me the correct credentials.

[riffraff]

I believe that falls out of the definition of "trivially easy to phish"