3 ms·

> Just clicking the link is enough to fail? Yes, clicking on links is dangerous[0]. 0. https://www.bleepingcomputer.com/news/security/google-fixes-exploited-c

• alanfranz 5y ago
  So, we don't click on links anymore? Anywhere on the internet? Just about any site can deliver a malicious link. How can I tell whether I can click on a link? Sometimes there's even something like linkprotector.outlook.com/[very_long_url] in corporate emails. My usual approach if I'm unsure whether a link is malicious would be to open it in a private window (and probably in a different browser from the one I usually employ), or if I really think it's phishy, I would open it from within throwaway VM. So, the blanket "click and fail" policy seems pointless to me. If I enter some login/PII, then I can agree I've failed the test. But a click on a link cannot be considered failure.