5 ms·
I remember that answer to "What keeps you up at night?" of a major security advisor to be "Our employees! They click everything!". Fitting video: https://www.y
by FlorianRappl 6y ago
I remember that answer to "What keeps you up at night?" of a major security advisor to be "Our employees! They click everything!".
Fitting video: https://www.youtube.com/watch?v=bLXW2JQ0TZk https://www.youtube.com/watch?v=bLXW2JQ0TZk
Training to prevent these social engineering leaks is definitely critical.
- fmajid 6y agoTraining is not the answer to security problems, as empirically it has no effect. The only measures that work are technological, like U2F keys.
- tantalor 6y agoTechnical solutions can always be defeated by social engineering. Training is supposed to prevent that.
- isbvhodnvemrwvn 6y agoHow do you socially engineer someone to compromise their U2F-based dongle?
- tantalor 6y ago"Hi I'm from tech support, I need you to go and generate some new backup codes. Now read them to me. Thanks!"
- kerng 6y agoWhen U2F is widely used, there will be more social engineering tricks - like, visit this attacker website or download this tool/browser extension, put cursor in box, now please touch your key to verify your identity. Countless creative ways will be tried and discovered.
- TheBigSalad 6y agoDo you have a source on that? Anecdotally, I'm better at recognizing threats after my company instituted annual training as well as simulated attacks.
- Can_Not 6y agoI dunno, this sounds like "you don't need vitamin D if you have enough vitamin C".