3 ms·
To elaborate the parent's point, Google switched away from employee training as the primary means to prevent phishing attacks to WebAuthn security keys. Their
by dwaite 5y ago
To elaborate the parent's point, Google switched away from employee training as the primary means to prevent phishing attacks to WebAuthn security keys.
Their phishing incidents dropped to zero.
https://krebsonsecurity.com/2018/07/google-security-keys-neutralized-employee-phishing/ https://krebsonsecurity.com/2018/07/google-security-keys-neu...
- varenc 5y agoThank you! I recalled that story but wasn't sure on the details.
- MrYellowP 5y agoYes, but it's not actually a solution. It maintains the status quo and only prevents its consequences. The problem, simplified: People are dumb. The solution: Making people smarter. Not a solution: Keeping people dumb and preventing them from making stupid mistakes.