Can you tell the good guys from the bad on the Internet? That is getting harder, indeed, Ed Foster asserts. “As several readers have pointed out recently, it’s not just because the scammers are getting better at masquerading as legitimate entities. All too often, the real site seems to be impersonating a phishing scheme impersonating it.”Oh, I see, it’s the old mystery wrapped inside an enigma, encircled by, well, you get the idea. One reader, for instance, after receiving a message claiming to be from Consumer Reports that he spotted as a dupe, wrote the company to complain. The response he received, however, stated that “the difference between their message and a spoof is that their suspicious-looking link really does send people to ConsumerReports.org when clicked upon.” Right. Legit sites imitage phishy behavior. Another reader is frustrated by how many sites send usernames and passwords in plain text e-mails. “I’m not talking about system-generated temporary passwords, but passwords that I created myself and have not requested be sent to me. Does no one understand how insecure e-mail is?” the reader writes. Which good sites are you having trouble telling from the bad? Foster wants to know… Security