4 ms·
The best defense is a good offense. That means taking your time and examining the message fully before taking any actions. Does the from address match what you'
by cryptosteve 8y ago
The best defense is a good offense. That means taking your time and examining the message fully before taking any actions. Does the from address match what you're expecting? Does the message create a curious sense of urgency, fear, or authority, almost demanding you do something? If so, those are the messages to be suspicious of, and the ones most likely to result in compromised accounts. This is why I never open links directly from an email.
- tqkxzugoaupvwqr 8y agoWhat you explain is still defense.
- gouggoug 8y agoYou could explain this over and over to my 65 year old parents, they still would fall for it. They're far from dumb, it's just that it's a lot of information of to handle.
- seth__ 8y agoOne solution is to set up a free lastpass account, change all the passwords to something random and only use autofill. They have to go out of their way to enter the password into another domain Sucks if they want to log in using a new or borrowed device
- bonestamp2 8y agoI've got my mom using an iPad which also reduces the attack surface, not to mention it's pretty hard for her to screw up the device on her own. I haven't had to help with anything computer related in about 4 years.
- qrbLPHiKpiux 8y agoThe public, “ain’t nobody got time for dat!” They will always continue to fall victim to these scams.
- hsnewman 8y agoThe best defense is to manually enter the url of the domain you need to log on to and log on from there. Never follow links, that what will get you in trouble.
- thefounder 8y agoThe passwords are broken. Anyone can fall for it regardless of how experienced he/she is. It's just a matter of time/opportunity. We need u2f
- Andre607 8y ago> We need u2f U2F is not immune to phishing attacks, at least not if backup codes are being used: https://youtu.be/rPTI9e-9tBE?t=936 https://youtu.be/rPTI9e-9tBE?t=936
- thefounder 8y agoThen let's not use backup codes. If you loose your auth device then you should recover it using an office of authentication (i.e https://travel.state.gov/content/travel/en/legal/travel-legal-considerations/internl-judicial-asst/authentications-and-apostilles/office-of-authentications.html https://travel.state.gov/content/travel/en/legal/travel-lega...)