3 ms·
Mavis should have been fired. That was a careless mistake against which someone in her position should be constantly vigilant. If we punished people for hacks t
by porphyrogene 8y ago
Mavis should have been fired. That was a careless mistake against which someone in her position should be constantly vigilant. If we punished people for hacks that are the direct result of their incompetence then we wouldn’t have these “Gee we’re sorry about that” corporate responses. She opened an email attachment because the stranger who sent it said that she should. If you fall for that you should not be using the internet at all.
- wyxuan 8y agoPeople get phished all the time. Its a general problem with how people are informed about these kinds of these things. Mavis is a victim of circumstance
- ohiovr 8y agoThe fast food industry covers hand washing in training videos why don’t more companies train people for basic street smarts online?
- porphyrogene 8y agoIt would be like a chef who doesn't wash his hands firing a line cook for not washing his hands. A company giving their executive who stores social security numbers on the same system on which she opens emails (and trusts them implicitly without a second thought) a free pass is a way for them to give themselves a free pass. If she were to be held responsible for not understanding basic security protocols then the company could be held accountable for failing to train her properly. Until we raise our standards the companies who compromise our privacy and security will have no incentive to raise theirs. Do you have a right to behave as if every link and file is safe and secure or should the people who are tasked with protecting personal information be expected to behave with reasonable suspicion of wrongdoing on the part of perfect strangers? HN wants to have it both ways, apparently.
- ohiovr 8y agoI’ve never fallen for phishing are you implying this avoidance skill is impossible to teach to executives? Obviously anyone who has custody of important information should not be in the born yesterday category of understanding what to do with that responsibility.
- porphyrogene 8y agoYou misunderstood my comment.
- porphyrogene 8y agoShe compromised the social security numbers and other personal information of people who pay her company under the assumption that they will protect that information and you're telling me that SHE is the victim?
- fmpwizard 8y agoThere is no reason to fire that employee. After such an event, they will likely be one of the most attentive employees in your company. Same way you don't fire an ops/dev employee after deleting a database. You look for solutions that will prevent it, like in the article, have training in place, run simulations, etc