Forgot your password?
typodupeerror

Comment Re:Lifestyle brand known for bass-heavy headphone (Score 1) 40

I have no experience with their cans, only their buds, which I've been very happy with. Maybe they have been ruined since they started taking advice from Bose, as I haven't bought any in a while, but the last ones I did buy had a more-easily-untangleable flat rubbery cord and sounded really nice. They were clear for both music and calls, and were less than twenty bucks... maybe $14?

I'm not a "pay extra" kind of guy, though I do try not to buy the absolute most crap thing. I'm a "refurb" type.

Comment Re:The IT department (Score 1) 54

Yep, and as a person in IT, I don't run phising tests. Why would I want my users to distrust emails from me? One of the ways they could have handled this would be to tell the user to connect to a validated and verified employee portal, and access the form for the ring. That's precisely how they should have handled it, and if it were me, I would have deleted the email, or, messaged IT and told them to validate it.

Comment What's the point of this test? (Score 2, Interesting) 54

There's a lot you could go over with what's wrong with this approach. What did they expect to happen? Would an employee read the email, question it, then email someone else, or a manager, or IT, and ask if the email was legit? If they did that for every email with a link or attachment, how quickly would the system get overwhelmed?

Turn this around, what if an employee refused to click a link or open an attachment in an email, across all emails? That would be reasonable given how botched this test was. What if the employees messaged IT and asked for PGP signing to be present across the email chains, would they entertain that?

Phising tests aren't useful, and they're not useful because every email sounds like it's a scam. I don't know the actual number but 9X% of emails, even when legit, sound like a bot farm sent it, to try to steal your credentials. Hell, most of the legit links are so scammy they can't even load if you have privacy extensions enabled. I ran into this Monday, for Monday.com, I couldn't load the link I was given because it didn't like my User Agent, but the email was legit, the link was legit, yet the entire stack was broken.

Instead of doing phising tests, redesign your communication security, and I know I'll get flak off this suggestion, I always do. Use PGP or another secure, gold standard protocol, to establish identity, a chain of trust, and intention. If you encrypt an email with PGP for someone, you can be almost certain it's safe. Once you clean that up, containerize the email clients, and no, I'm not joking. Your email client should live in a VM or Container, with full isolation, is it overkill, burdensome, annoying, resource intensive, yes! The problem it prevents is the problem they're trying to test for, if the email was a scam, or corrupted, or infected, yada yada yada, it's isolated. This makes the fallout minimal, and manageable, and, Windows 11, had or has support for this, I've seen it, when Microsoft can identify a security issue, you know it's obvious to the most special needs IT jr coop.

Just assume everyone has your email address, and assume they know how to bleep with the headers of the email. None of that should matter, if your communication security is decent, if your isolation hygiene is solid, the risk is basically 0. It's not literally 0, but you'll mitigate 99.9% of the issues before they happen. Email is no longer a useful communication tool for professionals, it's a fridge full of leftovers, of unknown age, and when someone get sicks from eating something that wasn't thrown out, they blame that person, instead of the idiots who manage the fridge.

Slashdot Top Deals

The universe seems neither benign nor hostile, merely indifferent. -- Sagan

Working...