4 ms·
Yep. We're getting more and more briefings, and training in avoiding social engineering, and opening ourselves up to making terrible mistakes with classified in
by Overtonwindow 9y ago
Yep. We're getting more and more briefings, and training in avoiding social engineering, and opening ourselves up to making terrible mistakes with classified information.
- tuxxy 9y agoMind sharing some of the tips/practices for those of us interested in keeping our OPSEC and PERSEC up to par?
- DaiPlusPlus 9y agoNothing new - I imagine - this internal NATO video from the 1960s seems just as relevant today: https://www.youtube.com/watch?v=0loanNljuZQ https://www.youtube.com/watch?v=0loanNljuZQ for example
- andai 9y agoYou missed the opportunity to say "keeping our OPSEC and PERSEC up to spec" :)
- tuxxy 9y agoYou know, I took about five minutes to write this. I couldn't figure out what to say, and this is what I meant to say haha. It was a long day.
- jgome 9y agoOf course you are, the whole security industry is based on spreading fear, uncertainty, and doubt... And that makes it very profitable.
- ghaff 9y agoSo are you suggesting that there's nothing to worry about and that everyone should carry on as if the threat environment hasn't changed?
- jgome 9y agoI suggest that you don't buy the hype and the bullshit. All this China/Russia stuff... It's nothing new, and it's not like the US doesn't do the same, and worse. And yet here we are, talking about the russians "hacking elections" and the chinese stealing "economic secrets", the first topic, pushed by infosec companies that also have political-economic interests, is being presented without any proof whatsoever, and the second topic clearly showing the level of paranoia in which US people live (IIRC, some espionage cases involving chinese citizens were proven in court to be false). Perhaps US people and their govt should care more about their own people being extremely greedy and true psychopaths before judging foreign govts and nations...
- deleted 9y ago[deleted]
- bitexploder 9y agoSome folks in our industry do use exploitative sales tactics, but that is not fair blanket statement. Services like preventing phishing, for example, are a big deal and I don't think I have to convince anyone it is a real threat. Most of us just use honesty about actual risks, not FUD. Just making people aware of security as a concern, from HR to developers can have a big impact and mitigate real risks.