5 ms·

According to the phishing training I was mandated to take at work if you are stupid enough to overlook the mistakes you are the right target. According to them

According to the phishing training I was mandated to take at work if you are stupid enough to overlook the mistakes you are the right target. According to them the misspellings filter out the smart enough people they don’t want talking to. But that could also be nonsense.

caturopath 5y ago
Yeah, I buy this theory in general, but I'm not sure that's the highest-leverage way to use this access.
- rPlayer6554 5y ago
  I think higher level ways get dangerous. Contacting the FBI directly to try and get money might make it easier to find you. Trying to sell it or other information to a foreign entity is also risky because you can't be sure they won't turn you over.
throwaway821909 5y ago
Ignoring this specific case where it seems especially unlikely, that's always seemed like someone worked backwards and overthought it to me, "the spelling mistakes, they have to mean something". I don't think there is a binary smart population and dumb population to optimise around, for every step down, some people who are otherwise convinced become hesitant and waste time, and some of that group become totally unconvinced.
- bredren 5y ago
  In this podcast episode with the founder of conversational AI, he describes the need to make spelling mistakes (and correct them) in order to help establish that the bot is actually a human. https://podcasts.apple.com/us/podcast/the-python-podcast-init/id981834425?i=1000540984207 https://podcasts.apple.com/us/podcast/the-python-podcast-ini...
  - dqv 5y ago
    I think making sublte spelling mistakes is a much clearer sign that someone is human. The imperfection without correction makes it more believable. I still think the hackers could stand to take a creative writing workshop.
- AbrahamParangi 5y ago
  The argument is that the hacker’s operational costs are massively dominated by the manual work of social engineering, so they have a huge incentive to filter out people who are less responsive to social engineering. If you accept that some people are more credulous than others, it becomes the best strategy to optimize for only talking to people who believe you.
dustingetz 5y ago
Spelling errors like that are how real people write in enterprise, imagine Trump writing email
- jdavis703 5y ago
  I’ve worked in government and contracted for Fortune 500 companies. Never have I seen an email that was written like Trump’s Tweets. I’m sure it happens, but I don’t think it’s common.

caturopath 5y ago

Yeah, I buy this theory in general, but I'm not sure that's the highest-leverage way to use this access.

rPlayer6554 5y ago
I think higher level ways get dangerous. Contacting the FBI directly to try and get money might make it easier to find you. Trying to sell it or other information to a foreign entity is also risky because you can't be sure they won't turn you over.

throwaway821909 5y ago

Ignoring this specific case where it seems especially unlikely, that's always seemed like someone worked backwards and overthought it to me, "the spelling mistakes, they have to mean something". I don't think there is a binary smart population and dumb population to optimise around, for every step down, some people who are otherwise convinced become hesitant and waste time, and some of that group become totally unconvinced.

bredren 5y ago
In this podcast episode with the founder of conversational AI, he describes the need to make spelling mistakes (and correct them) in order to help establish that the bot is actually a human. https://podcasts.apple.com/us/podcast/the-python-podcast-init/id981834425?i=1000540984207 https://podcasts.apple.com/us/podcast/the-python-podcast-ini...
- dqv 5y ago
  I think making sublte spelling mistakes is a much clearer sign that someone is human. The imperfection without correction makes it more believable. I still think the hackers could stand to take a creative writing workshop.
AbrahamParangi 5y ago
The argument is that the hacker’s operational costs are massively dominated by the manual work of social engineering, so they have a huge incentive to filter out people who are less responsive to social engineering. If you accept that some people are more credulous than others, it becomes the best strategy to optimize for only talking to people who believe you.

dustingetz 5y ago

Spelling errors like that are how real people write in enterprise, imagine Trump writing email

jdavis703 5y ago
I’ve worked in government and contracted for Fortune 500 companies. Never have I seen an email that was written like Trump’s Tweets. I’m sure it happens, but I don’t think it’s common.