3 ms·
Anyone can fall for these attacks in the moment, even experts. That was the point of the article. What makes us vulnerable is that we are human: we get tired,
by gridspy 5y ago
Anyone can fall for these attacks in the moment, even experts. That was the point of the article.
What makes us vulnerable is that we are human: we get tired, caught up in the urgency of the call and our logical thinking stops working.
The actual story of the article is that we need to design systems that are robust even when people are getting scammed. Able to identify and reverse scamming soon after it happens with easy ways to report it.
- unixbane 5y agoThere are no experts in information security. It's just random people with in depth knowledge of some tiny subsystem they happened to feel like studying. They are literally all LARPers who will fall for every single thing aside from whatever class of vulns they specialized in. There is no way to use modern systems securely. Absolutely none. Even with 20 years of study you will still find new ways they are broken and where security forgot to be implemented. All of this is a consequence of the industry being controlled by what is essentially a 5 year old: monetary incentives. > Able to identify and reverse scamming soon after it happens with easy ways to report it. Just make a site with a username / password where the user gets locked out forever if he forgets it. Do banking transactions by singing them with your public key, via a phone app. This is what I was complaining about not being able to do before smart phones became a thing. This is literally better than the tripe the 'experts' come up with. All these roundabout shit ways of authenticating people just add new ways of getting phished, exploited, etc.