Comment Re:Phishing Tests (Score 1) 73
No, in this case, the real problem is that most employees would expect a superbowl ring to come from a third party vendor. And as such, they'd expect the domain name to be a third party domain name.
No, in this case, the real problem is that most employees would expect a superbowl ring to come from a third party vendor. And as such, they'd expect the domain name to be a third party domain name.
These gotcha games suck, but they're necessary. And it's not just email, it's phone calls, it's social engineering, it's fake paper invoices, it's fake AI voices, it's deep fake live videos, etc.
And yes, automate your defenses, automate as much as possible, but that's not enough. Every day, there is a new scam out there, or a new vector of attack, that automation doesn't take into account yet. It's a never-ending list of problems that requires never-ending education.
And yes, let's not make fun of people, but let's assume that people are going to make mistakes (even after having been trained), so let's continue to do penetration testing (in addition to all the other precautions we take and all the defensive automation we create).
Yes, enforcement can take place *after* a police report has been made. Because if a crime has been committed, there is a process to follow and there is a criminal to catch.
After all, if a hidden camera is found, it could have been planted there by a host, or by an employee, or by a contractor, or by a previous guest, or may be the camera could have been planted by someone trying to make a fake allegation (for instance a local competitor, or a guest who's trying to extort the host)
Who knows? It's the same thing with hotels. Hotel rooms have been found with hidden cameras in them also. If you find a hidden camera in your hotel room, you do not contact their headquarters first, you do not tell the front desk first, you contact the police first! The police can secure the evidence. The police can record what happened. The police can even try to catch the perpetrator.
Secret recordings should be a police issue, not an AirBnB one. It's not like AirBnB can inspect a location like the police can. And it's not like AirBnB can prosecute a case. This is a matter for the local justice system.
Or am I missing something?
Sentient plasmoids are a gas.